PT-2026-63265

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An authenticated attacker with low-privilege access can cause a denial of service by sending a specially crafted, oversized request payload. This triggers uncontrolled resource consumption...

RHEL 8 : kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_124_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 (RHSA-2026:16210)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:16210 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module ...

Human Factors in Cybersecurity in Icelandic Small and Medium-Sized Enterprises

Cybersecurity threats are increasing in all aspects of society due to the integration of digital systems into modern-day life and a volatile geo-political landscape. Technical factors are an ongoing arms race; however, the threat surface from human and social factors is still present, often...

CVE-2026-26931

Memory Allocation with Excessive Size Value CWE-789 in the Prometheus remotewrite HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation CAPEC-130...

CVE-2026-2493

creationtimestamp| type| source ---|---|--- 2026-02-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-130/...

EUVD-2025-202827

Malicious code in elf-stats-caroling-sparkler-130 npm...

Malicious code in elf-stats-caroling-sparkler-130 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0273bb7532f6cdf1c7cc333611b00034deb3cf79207f3b76d63a0e748b7672a5 The package elf-stats-caroling-sparkler-130 was found to contain malicious code...

MAL-2025-192482 Malicious code in elf-stats-caroling-sparkler-130 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0273bb7532f6cdf1c7cc333611b00034deb3cf79207f3b76d63a0e748b7672a5 The package elf-stats-caroling-sparkler-130 was found to contain malicious code...

One newsletter to rule them all

Welcome to this week's edition of the Threat Source newsletter. " It's a dangerous business, going out your door. You step onto the road, and if you don't keep your feet, there's no knowing where you might be swept off to." -- Bilbo Baggins It's almost the end of the year, which feels like the...

Malicious code in elf-stats-snowdusted-stocking-130 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35a3b0c2505733f6c54c5b9d41c151216d3ce8d057decff61aa1ed778bbad86 The package elf-stats-snowdusted-stocking-130 was found to contain malicious code...

MAL-2025-192142 Malicious code in elf-stats-snowdusted-stocking-130 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35a3b0c2505733f6c54c5b9d41c151216d3ce8d057decff61aa1ed778bbad86 The package elf-stats-snowdusted-stocking-130 was found to contain malicious code...

EUVD-2025-25676

Malicious code in bioql PyPI...

CVE-2025-58272

CVE-2025-58272 affects Web Caster V130 firmware versions 1.08 and earlier. The issue is a CSRF (CWE-352) that can cause a logged-in user, who visits a malicious page, to have product settings unintentionally changed. Documentation from multiple sources confirms the affected product and impact. Th...

CVE-2025-58272

Cross-site request forgery vulnerability exists in Web Caster V130 versions 1.08 and earlier. If a logged-in user views a malicious page created by an attacker, the settings of the product may be unintentionally changed...

PT-2025-35676

Name of the Vulnerable Software and Affected Versions: Web Caster V130 versions 1.08 and earlier Description: A cross-site request forgery issue exists that allows an attacker to potentially modify product settings if a logged-in user views a malicious page. Recommendations: Update Web Caster V13...

Linux Distros Unpatched Vulnerability : CVE-2024-8387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that...

Linux Distros Unpatched Vulnerability : CVE-2024-8386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack...

CVE-2023-3097

A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been rated as critical. This issue affects the function setMainSource. The manipulation leads to os command injection. Local access is required to approach this attack. The exploit has been disclosed to the public...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in Elliptic module

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of Elliptic module Vulnerability Details CVEID:CVE-2024-42461 DESCRIPTION: Node.js Elliptic module could allow a remote attacker to obtain sensitive information, caused by a flaw with BER-encoded signatures are allowed. By...

Mozilla Firefox Security Update (MFSA2024-39) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...