postgresql:12 security update

An update is available for module.pgrepack, module.postgres-decoderbufs, module.pgaudit, pgrepack, postgres-decoderbufs, postgresql, pgaudit, module.postgresql. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RockyLinux 8 : postgresql:12 (RLSA-2026:52396)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:52396 advisory. postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation CVE-2026-6479 Tenable has extracted the preceding description block...

Debian dla-4745 : ata-modules-6.12.100+deb12-armmp-di - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4745 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4745-1 [email protected]...

Exploit for CVE-2026-6837

CVE-2026-6837: Zyxel export-cgi PKCS12 Command Injection T...

CLSA-2026-1786748284 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 17 @angular packages to address 2 CVEs. Fixed in 15.2.10-tuxcare.12...

Debian dla-4740 : libecpg-compat3 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4740 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4740-1 [email protected]...

Debian dla-4739 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4739 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4739-1 [email protected]...

CVE-2026-65528

creationtimestamp| type| source ---|---|--- 2026-08-12 18:16:19+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msvqeq72qf2u...

CVE-2026-64639

creationtimestamp| type| source ---|---|--- 2026-08-12 17:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msvmod5uqv2n 2026-08-13 16:15:05+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-815...

CVE-2026-73287

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS handles FTPS MKD in FtpsDriver::mkd in crates/protocols/src/ftps/driver.rs by calling storage.createbucket without authorizeoperation for S3Action::CreateBucket, allowing authenticated FTPS users denied...

GHSA-JM29-P7HH-VJHV

creationtimestamp| type| source ---|---|--- 2026-08-12 15:00:03+00:00| seen| https://t.me/bdufstecru/3378 2026-08-13 00:00:08+00:00| published-proof-of-concept| https://t.me/bdufstecru/3378...

CVE-2026-73290 RustFS: Anonymous ListObjectVersions bypasses RestrictPublicBuckets through the ListBucket fallback

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, an anonymous ListObjectVersions request in rustfs/src/storage/access.rs that lacks a direct bucket-policy grant falls back to an s3:ListBucket check and returns before the policyallowed path applies...

CVE-2026-73076

creationtimestamp| type| source ---|---|--- 2026-08-12 13:45:57+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-vim-1...

CVE-2026-47232 Admidio PKCS#12 private key export action lacks CSRF protection

Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive mode=export action in modules/sso/keys.php exports a PKCS12 bundle containing the configured private key and certificate, but the CSRF validation line is commented out. A forged cross-site POST from an...

CVE-2026-47232

Admidio prior to v5.0.10 exposes a sensitive action (mode=export) that returns a PKCS#12 bundle containing the private key and certificate without requiring CSRF validation. The vulnerability arises because the CSRF check in modules/sso/keys.php is commented out, enabling a forged POST from an au...

CVE-2026-47232 Admidio PKCS#12 private key export action lacks CSRF protection

Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive mode=export action in modules/sso/keys.php exports a PKCS12 bundle containing the configured private key and certificate, but the CSRF validation line is commented out. A forged cross-site POST from an...

PT-2026-71089

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS get condition values folds attacker-controlled request headers from HeaderMap into server-derived userid, username, principaltype, groups, versionid, signatureversion, jwt:, and ldap: condition keys,...

Debian dla-4731 : libgd-dev - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4731 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4731-1 [email protected]...

AlmaLinux 8 : postgresql:12 (ALSA-2026:52396)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:52396 advisory. postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation CVE-2026-6479 Tenable has extracted the preceding description block...

MAL-2026-13759 Malicious code in bs58-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d59b2d561269e6779eed82e12abe726403e9a2419936c01a4deaea9c3e70b2c Package bs58-12 presents itself as the popular bs58 base58 library README copied from bs58, advertising npm i --save bs58 but its own code is a thin...