PageToolKit

D1se0 :: ToolKit ToolKit web de ciberseguridad ofensiva/defen...

The push to stop algorithms controlling social media feeds has begun

Remember when social media was filled only with posts from your friends, rather than what an algorithm decided you wanted to see? So does the Australian government, and it wants that internet back. Yesterday, the government released draft legislation outlining a Digital Duty of Care. The proposal...

Security update for postgresql18

This update for postgresql18 fixes the following issues: CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. CVE-2026-6470: failure to check type USAGE privilege...

Security update for postgresql18

This update for postgresql18 fixes the following issues: CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. CVE-2026-6470: failure to check type USAGE privilege...

CLEANSTART-2026-XT48985 Security fixes in rancher-agent 2.12.11-r1

Package rancher-agent version 2.12.11-r1 fixes 18 vulnerabilities: CVE-2026-50195, CVE-2026-53492, CVE-2026-53489, CVE-2026-46680, CVE-2026-53488...

PostgreSQL 18.x < 18.6 Multiple Vulnerabilities

The version of PostgreSQL installed on the remote host is 18 prior to 18.6. As such, it is potentially affected by multiple vulnerabilities: - Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, v...

openSUSE 16: libecpg6 / libpq5 / postgresql18 / postgresql18-contrib / etc (openSUSE-SU-2026:21703-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21703-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE...

Updated postgresql18 & postgresql15 packages fix security vulnerabilities

psql COPY FROM STDIN early failure processes data lines as psql commands. CVE-2026-6464 ALTER TABLE ALTER TYPE resets extended statistics ownership. CVE-2026-6469 Fails to check type USAGE privilege. CVE-2026-6470 Logical decoding can dlopen arbitrary file. CVE-2026-6471 tsvector and tsquery...

BIT-POSTGRESQL-2026-14673 PostgreSQL amcheck does not clear untrusted search path

Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on the search path, via setting a hostile search path before calling the amcheck function. Within major versions 18, 16...

PT-2026-78675

Name of the Vulnerable Software and Affected Versions Lemmy versions prior to 0.19.19 Lemmy versions prior to 1.0.0-alpha.18 Description A lower-ranked remote moderator can remove a higher-ranked moderator by sending a signed ActivityPub Remove activity to the target instance. While the local API...

OpenJDK 8 <= 8u502 / 11.0.0 <= 11.0.32 / 17.0.0 <= 17.0.20 / 21.0.0 <= 21.0.12 / 25.0.0 <= 25.0.4 / 26.0.0 <= 26.0.2 Multiple Vulnerabilities (2026-08-18)

The version of OpenJDK installed on the remote host is 8 prior to 8u502 / 11.0.0 prior to 11.0.32 / 17.0.0 prior to 17.0.20 / 21.0.0 prior to 21.0.12 / 25.0.0 prior to 25.0.4 / 26.0.0 prior to 26.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026-08-18 advisory...

CVE-2026-62634

creationtimestamp| type| source ---|---|--- 2026-08-18 22:18:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfapvgoou2c 2026-08-19 05:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfxpd6lpk2u 2026-08-19 17:21:26+00:00| seen|...

CVE-2026-12359

creationtimestamp| type| source ---|---|--- 2026-08-18 21:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtf6fcetnl23...

CVE-2026-75843

creationtimestamp| type| source ---|---|--- 2026-08-18 12:10:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mte6pgeyfk2j 2026-08-18 14:08:20+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtefcudxoh25...

CVE-2026-65333

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:35+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818 2026-09-15 20:45:56+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19 2026-09-16 22:01:15+00:00|...

CVE-2026-64778

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:07+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818 2026-08-18 08:48:15+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2020 2026-09-15 04:46:59+00:00| seen|...

CVE-2026-71479

In New API (github.com/QuantumNous/new-api) before 1.0.0-rc.18, user-controlled billing multipliers (n, duration, max_tokens, etc.) lacked upper-bound validation and overflow-safe conversion in common/quota_math.go, causing integer overflow into negative settlement charges that credit attacker ac...

CVE-2026-71479 New API: Integer overflow in quota billing yields negative charges (self-crediting)

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...

CVE-2026-71479

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...

PT-2026-76692

Name of the Vulnerable Software and Affected Versions New API versions prior to 1.0.0-rc.18 Description An issue exists where user-controlled quantity parameters can cause overflow conversions during quota calculations in common/quota math.go and related settlement paths. A low-privileged account...