pwnos2-linux-web-pentest

PwnOS2 Linux Web Pentest Authorized penetration-testing case...

AZL-96965 CVE-2026-53585 affecting package libgit2 for versions less than 1.7.2-3

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, gitdeltaapply in src/libgit2/delta.c trusts the attacker-controlled ressz value parsed by hdrsz from...

CVE-2026-72844

The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::addinductive in src/kernel/inductive.cpp did not type check the nested inductive applications that are replaced by auxiliary types, so their...

py-web-vuln-scanner

No d...

CVE-2026-64960

creationtimestamp| type| source ---|---|--- 2026-08-20 16:15:03+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-64960 2026-08-22 05:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtnk7sd5ur24...

protobufjs: protobufjs: Denial of Service via crafted JSON descriptors

A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the...

[SECURITY] Fedora 44 Update: roundcubemail-1.7.3-1.fc44

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server and WebSphere Application Server Liberty shipped with IBM Guardium Key Lifecycle Manager (GKLM)

Summary WebSphere Application Server and WebSphere Application Server Liberty is shipped as a component of IBM Guardium Key Lifecycle Manager GKLM. Information about security vulnerabilities affecting WebSphere Application Server and WebSphere Application Server Liberty has been published in a...

roamr v0.1.4

roamr Find the best WiFi network for where you are, without dropping your connection. In an office or home with several WiFi networks, the best one changes as you move, and "best" isn't just signal bars. A network can show full bars and still be slow: crowded 2.4 GHz, an old WiFi standard, a...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by an authentication bypass vulnerability (CVE-2026-14525)

Summary IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by an authentication bypass vulnerability when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty (bundled with IBM Enterprise Application Runtimes) are affected by multiple vulnerabilities due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)

Summary There are mulitple vulnerabilities in the Apache CXF library that affect IBM WebSphere Application Server and WebSphere Application Server Liberty, which are bundled with IBM Enterprise Application Runtimes, when the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, or xmlWS-4.0 features are...

IBM WebSphere Application Server - Liberty Permission Elevation Vulnerability

IBM WebSphere Application Server - Liberty is a lightweight, modular Java runtime environment developed by IBM. IBM WebSphere Application Server - Liberty has a permission escalation vulnerability, which stems from the use of Liberty collectives and leads to an increase in permissions. No detaile...

IBM WebSphere Application Server – Liberty deserialization vulnerability

IBM WebSphere Application Server - Liberty is a lightweight, modular Java runtime environment developed by IBM. IBM WebSphere Application Server - Liberty has a deserialization vulnerability, which stems from the unsafe deserialization processing of serialized data submitted by users by the...

IBM WebSphere Application Server – Liberty Authentication Bypass Vulnerability

IBM WebSphere Application Server - Liberty is a lightweight, modular Java runtime environment developed by IBM. IBM WebSphere Application Server - Liberty has a vulnerability related to authentication bypass. This vulnerability arises due to improper authentication practices when the rtcomm-1.0 o...

PT-2026-79004

Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application BMS allows Authentication Bypass. This issue affects Baylan Smart Meter Management Application BMS: before v1.1.10.142...

CVE-2026-15706: Missing Authentication for Critical Function

Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application BMS allows Authentication Bypass. This issue affects Baylan Smart Meter Management Application BMS: before v1.1.10.142...

PT-2026-78994

Name of the Vulnerable Software and Affected Versions Chaplin versions prior to 2.6.9 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions. Recommendations Update to a version newer than 2.6.8...

ggshield v1.54.0-rc1

ggshield: protect your code with GitGuardian ggshield is a CLI application that runs in your local environment or in a CI environment to help you detect more than 500+ types of secrets. ggshield uses our public API through py-gitguardian to scan and detect potential vulnerabilities in files and...

CVE-2026-72530

creationtimestamp| type| source ---|---|--- 2026-08-19 18:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthcttatjf27 2026-08-19 18:11:24+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthdegbfxg2m 2026-08-19 23:00:05+00:00| seen|...

zeek v8.2.1

The Zeek Network Security Monitor A powerful framework for network traffic analysis and security monitoring. Key Features — Documentation — Getting Started — Development — License Key Features In-depth Analysis Zeek ships with analyzers for many protocols, enabling high-level semantic analysis at...