SUSE SLES15: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2026:3364-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3364-1 advisory. This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS...

Linux Distros Unpatched Vulnerability : CVE-2026-6949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - To calculate the size of a DNS packet region signed by a TSIG record, Samba's internal DNS server subtracted the presumed size of the TSIG record. In cases wher...

SUSE SLES15: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2026:3365-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3365-1 advisory. This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS...

SUSE CVE-2026-6949

unknown...

CVE-2026-6949

creationtimestamp| type| source ---|---|--- 2026-07-28 14:25:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrpmhj66mu27 2026-07-29 12:45:08+00:00| seen| https://www.acn.gov.it/portale/w/nuove-vulnerabilita-in-samba-1...

CVE-2026-6949

TSIG packet with name compression can crash DNS...

Debian dsa-6401 : ctdb - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6401 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6401-1 [email protected] https://www.debian.org/securit...

DNS signing DoS via TKEY name cache exhaustion

== Summary: An unauthenticated user can repeatedly register names TKEY names, which floods a cache causing legitimate TKEYs to be expunged. This can practically block the use DNS TSIG signing. Description Only authenticated users are supposed to be able to use TKEY DNS records to register shared...

AlmaLinux 8 : go-toolset:rhel8 (ALSA-2026:6949)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:6949 advisory. cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive CVE-2025-61731 net/url: Incorrect parsing of IPv6 host literals in net/url...

MINI-WXH4-6949-GHF6

Bulletin has no description...

Oracle Linux 8 : go-toolset:ol8 (ELSA-2026-6949)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-6949 advisory. delve 1.25.2-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.25.2-1 - Update to Delve 1.25.2 Sync from CentOS Stream 9 - Related:...

RHSA-2026:6949 Red Hat Security Advisory: go-toolset:rhel8 security update

Bulletin has no description...

CVE-2025-6949

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A critical authorization flaw in the API allows an authenticated, low-privileged user to create a new administrator account, including accounts with usernames identical to...

CVE-2025-6949

creationtimestamp| type| source ---|---|--- 2025-10-17 09:04:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3ew4ps3g226 2025-10-17 13:34:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115389765944283292 2025-10-24 07:43:11+00:00| seen| https://t.me/icscert/1339...

CVE-2024-6949

A vulnerability classified as problematic was found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected by this vulnerability is an unknown functionality of the file /pages.php?edit=News. The manipulation leads to path traversal. The attack can be launched remotely. The exploi...

Ubuntu: Security Advisory (USN-6949-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-6949-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-6949

creationtimestamp| type| source ---|---|--- 2024-07-21 12:32:44+00:00| seen| https://t.me/cvedetector/1340...

CVE-2023-6949

creationtimestamp| type| source ---|---|--- 2024-06-14 02:58:30+00:00| published-proof-of-concept| https://t.me/VasileiadisAnastasis/1144...

CVE-2023-6949

A Missing Authentication for Critical Function issue affecting the HTTP service running on the DJI Mavic Mini 3 Pro on the standard port 80 could allow an attacker to enumerate and download videos and pictures saved on the drone internal or external memory without requiring any kind of...