ROOT-APP-PYPI-GHSA-956X-8GVW-WG5V GHSA-956x-8gvw-wg5v in GitPython - Patched by Root

Root has patched GHSA-956x-8gvw-wg5v in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-FJR4-X663-MWXC GHSA-fjr4-x663-mwxc in GitPython - Patched by Root

Root has patched GHSA-fjr4-x663-mwxc in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-R9MR-M37C-5FR3 GHSA-r9mr-m37c-5fr3 in GitPython - Patched by Root

Root has patched GHSA-r9mr-m37c-5fr3 in the GitPython package for Root:PyPI. Multiple fixed versions available...

CVE-2026-13610

creationtimestamp| type| source ---|---|--- 2026-08-13 07:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117087025455993110 2026-08-13 07:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msx4qq4kqi2t 2026-08-15 09:00:06+00:00| published-proof-of-concept|...

@dreamguyxeon/baileyx (>=1.0.0, <=5.0.0), @rishi56/baileys (1.0.0) +2 more potentially affected by unknown CVE via @dgxeon13/libsignal-node (1.0.0)

@dgxeon13/libsignal-node NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @dgxeon13/libsignal-node and may be impacted: - @dreamguyxeon/baileyx =1.0.0, =1.0.0, =1.0.2 - sayan-soket 1.0.0 Source cves: unknown CVE Source advisory:...

Johnson Controls Metasys

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow a low-privilege user or attacker to inject a persistent malicious payload via a crafted URL that executes in the context of other users' sessions, including administrators, potentially leading to session hijacking and...

Haiwell IoT Cloud HMI Gateway

ADVISORY SUMMARY Successful exploitation of this vulnerability may allow an attacker to inject and execute arbitrary OS commands with root privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize...

CVE-2026-18704

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:43+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813 2026-08-15 14:00:38+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mt4tidhjus2x 2026-08-15 14:00:52+00:00| seen|...

CVE-2026-18691

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:12+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-16770

creationtimestamp| type| source ---|---|--- 2026-08-13 04:15:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-16770 2026-08-13 13:50:13+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxrxlctru2t 2026-08-14 09:00:44+00:00| seen|...

CVE-2026-49473

creationtimestamp| type| source ---|---|--- 2026-08-13 03:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mswnpr75nj2m 2026-08-13 04:15:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-49473...

PT-2026-71588

Unauthenticated Broken Access Control in Anti Spam and list cleaner AcyChecker = 2.0.0 versions...

ROS-20260813-73-0023

The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

Oracle Linux 8 : grafana (ELSA-2026-54243)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54243 advisory. - Fixes CVE-2024-1442 Add email verification when updating user email Orabug: 38550520 - Resolves RHEL-219393: CVE-2026-42127 Tenable has extracted th...

Oracle Linux 8 / 9 : java-17-openjdk (ELSA-2026-42887)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42887 advisory. 1:17.0.20.0.8-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.20.0.8-1.1 - Sync java-17-openjdk-portable.specfile from...

PT-2026-71842

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper authentication may allow a remote attacker to execute arbitrary code or obtain sensitive information. Recommendations At the moment, there is no information about a newer version that contain...

CVE-2026-53789

rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope of --delete operations beyond the intended destination subtree by sending a crafted file list that causes rsync to reclassify implied parent directory entries or treat synthetic...

CVE-2026-53786

rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override module-level filter restrictions by supplying malicious --filter merge file directives. Attackers can inject client-side merge file directives during filter evaluation to introduce rules...

PT-2026-71827

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to delete arbitrary files due to path traversal...

Debian dsa-6437 : libaprutil1-dbd-mysql - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6437 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6437-1 [email protected] https://www.debian.org/securit...