PT-2026-21947

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Fabric Switches versions affected versions not specified Description A flaw exists in Cisco Nexus 9000 Series Fabric Switches operating in ACI mode that may allow a remote, unauthenticated attacker to disrupt service. T...

Microsoft Patch Tuesday for February 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for February 2026, which includes 59 vulnerabilities affecting a range of products, including two that Microsoft marked as "Critical". CVE-2026-21522 is a critical elevation of privilege vulnerability affecting Microsoft ACI Confidential...

CVE-2026-21522

Azure Compute Gallery is affected by CVE-2026-21522 due to improper neutralization of special elements used in a command, enabling an authorized attacker to achieve local privilege escalation. The issue concerns command injection in the Azure Compute Gallery workflow, with a CVSS v3.1 base score ...

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

MiracleLinux 4 : 389-ds-base-1.2.11.15-14.AXS4 (AXSA:2013-412:03)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-412:03 advisory. 389 Directory Server is an LDAPv3 compliant server. The base package includes the LDAP server and command line utilities for server administration. Security...

Malicious code in aciyua-idut-daau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bf5f0b85f0423110166d791fefa23c06d4a5cd9638dc5de81c23569f9e4596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2019-10142

Malware in sbrugna...

EUVD-2015-4258

Malware in sbrugna...

EUVD-2019-10147

Malware in sbrugna...

EUVD-2019-10361

Malware in sbrugna...

EUVD-2001-0953

Malware in sbrugna...

EUVD-2022-26171

Malicious code in bioql PyPI...

EUVD-2023-24364

Malicious code in bioql PyPI...

EUVD-2021-7050

Malicious code in bioql PyPI...

EUVD-2021-6855

Malicious code in bioql PyPI...

ACI Worldwide Proactive Risk Manager 安全漏洞

ACI Worldwide Proactive Risk Manager is an electronic payment risk management program from ACI Worldwide, USA. A security vulnerability exists in ACI Worldwide Proactive Risk Manager version 9.1.1.0, which originates from multiple cross-site scripting vulnerabilities in the add/edit form field...

CVE-2023-45249

Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure ACI before build 5.0.1-61, Acronis Cyber Infrastructure ACI before build 5.1.1-71, Acronis Cyber Infrastructure ACI before build 5.2.1-69, Acronis Cyber Infrastructure ACI...

CVE-2023-45249: Use of Default Password

Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure ACI before build 5.0.1-61, Acronis Cyber Infrastructure ACI before build 5.1.1-71, Acronis Cyber Infrastructure ACI before build 5.2.1-69, Acronis Cyber Infrastructure ACI...

aci-assoc.org Cross Site Scripting vulnerability OBB-3853067

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cisco Nexus 9000 Information Disclosure (CVE-2023-20185)

A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, remote attacker to read or modify intersite encrypted traffic. This vulnerability is due to an issue with the implementation of the cipher...