openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client

A flaw was found in OpenSSH. A use-after-free vulnerability exists in the ssh client when handling concurrent remote-forwarding operations. This can occur if a remote forwarding is added via the local session multiplexing socket while a remote forwarding open request is pending with the server. A...

CVE-2026-31377

An Improper Authentication vulnerability in the Apache Doris Frontend FE meta service allows an unauthenticated remote attacker to access internal metadata service endpoints. The affected endpoints relied on client-supplied node information for authentication without providing sufficient...

kit-oauth

kit-oauth OAuth 2.0 client library for Kit applications TOC Files File| Description ---|--- .editorconfig| Editor formatting configuration .gitignore| Git ignore rules for build artifacts and dependencies .tool-versions| asdf tool versions Zig, Kit LICENSE| MIT license file README.md| This file...

RLSA-2026:69387 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps

A flaw was found in the libceph component of the Linux kernel. A remote attacker could send a specially crafted monitor map monmap that advertises zero monitors. This malformed monmap is incorrectly processed as valid, which can lead to a client crash when attempting to open a session. This...

sdk

@cosignet/sdk Thin, zero-dependency TypeScript client for Cosignet — human-in-the-loop approval for high-risk AI-agent actions, with payload-bound passkey signatures. Put a human in the loop before a dangerous action runs: pause it, get an explicit passkey approval from a person Face ID / Touch I...

webvm

WebVM このリポジトリは、ブラウザ上で動作するLinux仮想マシンである https://webvm.io のソースコードをホストしています。 新しいAlpine/Xorg/i3グラフィカル環境をお試しください：https://webvm.io/alpine.html WebVMは、HTML5/WebAssembly上で完全にクライアントサイドで動作するサーバーレスの仮想環境です。Linux ABI互換になるように設計されています。多くのネイティブ開発ツールチェーンを含む、未改変のDebianディストリビューションを実行します。...

PublicSafe

PublicSafe Your Browser, Your Safe Space PublicSafe is a free and open-source browser extension focused on privacy, encryption, and user control. It provides client-side encryption tools designed to help users protect sensitive information before it leaves their browser. PublicSafe is built aroun...

cve-2024-7646

CVE-2024-7646 説明 デフォルトでは nginx.ingress.kubernetes.io/server-snippet は無効ですが、本CVEにより nginx.ingress.kubernetes.io/auth-tls-verify-client を使用してカスタムスニペットを挿入したり、Luaコードを含めることが可能です。 修正バージョン ingress-nginx controller v1.11.2 - kubernetes/ingress-nginx11719 および kubernetes/ingress-nginx11721 によって修正されました...

cve-2021-21980-mock-server

Clippy of the Dead - CVE-2021-21980 テスト環境とNucleiテンプレート このリポジトリには、CVE-2021-21980（vSphere Web Clientのパス横断）を検出する高信頼性のNucleiテンプレートと、安全なローカルテストのために脆弱な動作を再現する小さなモック環境が含まれています。 ファイル: cve-2021-21980.yaml: 複数のエンコーディングバリアントとマッチャーを備えたNucleiテンプレート app.py: /eam/vibのパス横断脆弱性をシミュレートする小さなFlaskアプリ Dockerfile:...

CVE-2025-4679-SecureOAuth-Demo---Enfoque-educativo

🔐 OAuth セキュリティラボ: CVE-2025-4679 教育用シミュレーター 実際のシステムを危険にさらすことなく、OAuth の脆弱性について学べる安全で隔離された環境 🚀 クイックスタート | 📚 ラーニングパス | 🛡️ 安全な環境 | 👥 コントリビューター 📖 概要 この教育用ラボは、Synology の Active Backup for Microsoft 365 で発見された CVE-2025-4679 の脆弱性 をシミュレートします。この脆弱性では、クライアントシークレットが HTTP...

CVE-2026-67235: Allocation of Resources Without Limits or Throttling

RabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-header BodySize a uint64 was stored without validation against maxmessagesize. The size check ran only when assembly completed. By declaring bodysize = 2^63-1 and then streaming...

RockyLinux 8 : freerdp (RLSA-2026:69387)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:69387 advisory. FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway CVE-2026-55193 Tenable has extracted the preceding description block directly fr...

Linux Distros Unpatched Vulnerability : CVE-2026-83603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netdata is an open source observability tool. Prior to 2.10.4, the setuid-root ndsudo helper command fail2ban-client-status-socket in...

ROS-20260923-73-0053

The vulnerability of the parsedfsreferrals function in the fs/smb/client/misc.c module of the SMB client support library in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0030

The vulnerability of the fs/smb/client component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-92019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153....

TencentOS Server 4: nodejs20 (TSSA-2026:1043)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1043 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

ROS-20260923-73-0065

The vulnerability of the nfsfiledirectread function in the fs/nfs/direct.c module, which is part of the NFS client support in Linux kernel, is related to data processing errors. Exploiting this vulnerability can allow an attacker to cause service failures...