Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000843 advisory. The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service host OS...

MiracleLinux 4 : dhcp-4.1.1-34.P1.AXS4 (AXSA:2013-133:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-133:01 advisory. DHCP Dynamic Host Configuration Protocol is a protocol which allows individual devices on an IP network to get their own network configuration information IP...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001544 advisory. An issue was discovered in the Linux kernel before 4.18.11. The ipddpioctl function in drivers/net/appletalk/ipddp.c allows local users to obtain sensitive kernel...

PT-2026-3253

Name of the Vulnerable Software and Affected Versions Nu Html Checker versions prior to commit 23f090a11bab8d0d4e698f1ffc197a4fe226a9cd Description The Nu Html Checker validator.nu is susceptible to a restriction bypass that enables remote attackers to initiate arbitrary HTTP/HTTPS requests to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001607)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001607 advisory. In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showflopp...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001484)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001484 advisory. A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the...

CVE-2021-47791

Summary: CVE-2021-47791 affects SmartFTP Client 10.0.2909.0. According to connected sources, the product is vulnerable to multiple denial-of-service conditions triggered by specially crafted input, including malformed paths, invalid IP addresses, or clearing the connection history in the client i...

CVE-2021-47791 SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service

SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's...

CVE-2021-47791 SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service

SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's...

CVE-2021-47791

SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's...

PT-2026-3163

Name of the Vulnerable Software and Affected Versions SmartFTP Client version 10.0.2909.0 Description SmartFTP Client is susceptible to multiple denial of service issues. An attacker can cause the application to crash by providing specially crafted input. This can be achieved by submitting...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002273)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002273 advisory. The pagemapopen function in fs/proc/taskmmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003529)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003529 advisory. In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showflopp...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003398)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003398 advisory. The printbinderrefolocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading ref...

CVE-2025-71127

The CVE-2025-71127 issue concerns the Linux kernel mac80211 handling of Beacon frames. A unicast Beacon frame could bypass beacon protection when the Protected Frame bit is 1, potentially allowing targeted actions on a specific STA. The documented fix is a policy change to drop Beacon frames addr...

CVE-2025-71127 wifi: mac80211: Discard Beacon frames to non-broadcast address

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Discard Beacon frames to non-broadcast address Beacon frames are required to be sent to the broadcast address, see IEEE Std 802.11-2020, 11.1.3.1 "The Address 1 field of the Beacon .. frame shall be set to the...

CVE-2025-71127

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Discard Beacon frames to non-broadcast address Beacon frames are required to be sent to the broadcast address, see IEEE Std 802.11-2020, 11.1.3.1 "The Address 1 field of the Beacon .. frame shall be set to the...

PLUGGYAPE Malware Uses Signal and WhatsApp to Target Ukrainian Defense Forces

The Computer Emergency Response Team of Ukraine CERT-UA has disclosed details of new cyber attacks targeting its defense forces with malware known as PLUGGYAPE between October and December 2025. The activity has been attributed with medium confidence to a Russian hacking group tracked as Void...

CVE-2025-14613

The WordPress GetContentFromURL plugin is affected in all versions up to 1.0. The root cause is using wp_remote_get() instead of wp_safe_remote_get() to fetch content from a user-supplied URL in the [gcfu] shortcode; this enables authenticated attackers with Contributor-level access and above to ...

Linux Distros Unpatched Vulnerability : CVE-2025-71127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Discard Beacon frames to non-broadcast address Beacon frames are required to...