AlmaLinux 8 : redis:6 (ALSA-2026:64823)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64823 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data list...

RHEL 8 : redhat-ds:11 (RHSA-2026:64793)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64793 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...

AlmaLinux 8 : kernel-rt (ALSA-2026:64770)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64770 advisory. kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel:...

RockyLinux 8 : httpd:2.4 (RLSA-2026:64794)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:64794 advisory. httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in modldap per-directory configuration CVE-2026-29167 Tenable has...

RHEL 8 : python3 (RHSA-2026:64816)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:64816 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

RHEL 8 : 389-ds:1.4 (RHSA-2026:64776)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64776 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

RHEL 8 : 389-ds:1.4 (RHSA-2026:64789)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64789 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

RHEL 8 : kernel-rt (RHSA-2026:64770)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64770 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

RHEL 8 : expat (RHSA-2026:64809)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64809 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call...

RHEL 8 : redis:6 (RHSA-2026:64823)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64823 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

CVE-2021-43798

CVE-2021-43798 Grafana 8.x Path Traversal Pre-Auth Todo el crédito es para j0v y su tweet https://twitter.com/j0v0x0/status/1466845212626542607 Aviso legal Esto es solo con fines educativos. No soy responsable de tus acciones. Úsalo bajo tu propio criterio. De buena fe, he retenido la publicación...

CVE-2021-29447-PoC

CVE-2021-29447 Prueba de Concepto root@kitploit: ╔═╗╦ ╦╔═╗ ║ ╚╗╔╝║╣────2021-29447 ╚═╝ ╚╝ ╚═╝ Escrito por Isa Ebrahim - 0xRar en enero de 2023 ═══════════════════════════════════════════════════════════════════════════ Título: Problema de análisis XML en la librería multimedia de WordPress que...

Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: Update to version jdk8u504 icedtea 3.40.1. CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to sensitive data bsc1275777. CVE-2026-61308: unauthenticated attacker with...

MiracleLinux 8 : grafana-pcp-5.1.1-18.el8_10 (AXSA:2026-1778:11)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1778:11 advisory. mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header CVE-2026-42504 encoding/asn1: golang: Go encoding/asn1: Denial of...

MiracleLinux 8 : kernel-4.18.0-553.157.1.el8_10 (AXSA:2026-1779:74)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1779:74 advisory. kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154create CVE-2024-56602 kernel: ip6gre: Use cached t-net in ip6erspanchangeli...

Oracle Linux 8 : ELSA-2026-63163-0: / container-tools:ol8 (ELSA-2026-631630)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-631630 advisory. - rebuild with updated Go to fix CVE-2026-42499 - rebuild with updated Go to fix CVE-2026-42499 - rebuild with Go 1.25.11 to fix CVE-2026-33818,...

EUVD-2026-71506

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix event length with forced 8-byte alignment When RBFORCE8BYTEALIGNMENT is true, rbcalculateeventlength reserves the space of event-array0 for placing the data length and rbupdateevent stores the data length in...

CVE-2026-80876

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix event length with forced 8-byte alignment When RBFORCE8BYTEALIGNMENT is true, rbcalculateeventlength reserves the space of event-array0 for placing the data length and rbupdateevent stores the data length in...

CVE-2026-80876 ring-buffer: Fix event length with forced 8-byte alignment

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix event length with forced 8-byte alignment When RBFORCE8BYTEALIGNMENT is true, rbcalculateeventlength reserves the space of event-array0 for placing the data length and rbupdateevent stores the data length in...

CVE-2026-80876

CVE-2026-80876 affects the Linux kernel ring-buffer subsystem on architectures where RB_FORCE_8BYTE_ALIGNMENT is true (observed on riscv64 with CONFIG_HAVE_64BIT_ALIGNED_ACCESS=y). The root cause is a mismatch in length calculation: rb_calculate_event_length() unconditionally reserves sizeof(even...