ROS-20260729-73-0032

The vulnerability of the checkaccesspermission function in the pgAdmin 4 database management tool is related to deficiencies in the mechanism for handling symbolic links. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and accessibility of the protected...

TencentOS Server 4: nginx (TSSA-2026:0673)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0673 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Joomla! Extension 'iCagenda' 3.2.1 < 3.9.15 / 4.x < 4.0.8 Arbitrary Files Upload

The version of the iCagenda extension for the Joomla! application running on the remote host is 3.2.1 prior to 3.9.15 or 4.x prior to 4.0.8. It is, therefore, affected by an arbitrary files upload vulnerability in the file attachment feature, ultimately resulting in PHP code upload and execution...

TencentOS Server 4: gnutls (TSSA-2026:0741)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0741 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: git-lfs (TSSA-2026:0739)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0739 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

phantomdrive v1.2

Ovrdrive Size : 36.6 x 15 mm Layer : 4 Layers Material : FR-4: TG150 Thickness : 0.6 mm Min track/spacing : 4/4mil Min hole size : 0.2mm Solder mask : Black Silkscreen : White Edge connector : No Surface finish : HASL lead free Via process : Tenting vias Finished copper : 1 oz Cu Inner Copper:1 o...

dependo

dependo A proof of concept for state-of-the-art observability...

pgAdmin 4 - Authentication Bypass Detection

pgAdmin 4 versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data. !/usr/bin/env python3 -- coding: utf-8 -- """pgAdmin 4 versions 8."""...

HPE Integrated Lights-out 4 (ILO4) <2.53 - Authentication Bypass Detection

HPE Integrated Lights-out 4 iLO 4 prior to 2.53 was found to contain an authentication bypass and code execution vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """HPE Integrated Lights-out 4 iLO 4 prior to 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Gira HomeServer 4 Login Panel - Detect

Gira HomeServer 4 login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Gira HomeServer 4 login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Gira HomeServer 4 Login Panel -...

ROS-20260728-73-0017

The vulnerability of the Browser Tree and Explain Visualizer modules in the pgAdmin 4 database management tool exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...

Malicious Package

Overview falconolive-4 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview john-wick-kapitel-4-ganzer-film-auf-deutsch is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview john-wick-4-2023-pelicula-completa-espa-ol-spanish--march-27 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

PT-2026-66777

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions prior to 9.17-1.1 Description The Import/Export Data functionality fails to properly neutralize special elements, which allows a remote attacker to execute arbitrary operating system commands on the server. Recommendations...

cloudflared v2026.7.3

Cloudflare Tunnel client Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. This daemon sits between Cloudflare network and your origin e.g. a webserver. Cloudflare attracts client requests and sends them to...

genai-4-dps-helper (0.2.31), news-scraper-pdf (1.1.6) +6 more potentially affected by CVE-2026-59936 via pypdf (5.3.0)

pypdf PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - genai-4-dps-helper 0.2.31 - news-scraper-pdf 1.1.6 - polytext =0.1.0, =0.1.0, =0.1.10 - python-pdf-toolkit 0.1.1 - synforge 0.1.0 - ta-using-llms 0.0....

CVE-2026-42769 affecting package openssl for versions less than 3.3.7-4

CVE-2026-42769 affecting package openssl for versions less than 3.3.7-4. A patched version of the package is available...

CVE-2026-32665: Improper Validation of Specified Quantity in Input

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC DoQ is enabled, the first two bidirectional streams on a new QUIC connection streamid 0 and 4 bypass the per-stream 'quic-size' gate entirely, and large input buffers are allocated later, after only the 2-byte...

Plone Volto < 16.34.0 / 17.x < 17.22.1 / 18.x < 18.24.0 / 19.0.0-alpha.1 < 19.0.0-alpha.4 DoS

The version of the @plone/volto Node.js Package installed on the remote host is prior to 16.34.0, or 17.x prior to 17.22.1, or 18.x prior to 18.24.0, or 19.0.0-alpha.1 prior to 19.0.0-alpha.4. It is, therefore, affected by a denial of service vulnerability. An unauthenticated, remote attacker, ca...