opensquat

openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...

CVE-2026-97866

A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Executing a manipulation of the argument version/url/packagekey/package name can lead to channel accessible by non-endpoint...

CVE-2026-97866

A weakness exists in Zhonglun CloudPOS 3.0 within the Automatic Update component, specifically involving an unknown functionality in the Program.cs file. By manipulating arguments such as version , url , packagekey , or package name , a remote attacker can cause a channel to become accessible by ...

CVE-2026-97866 Zhonglun CloudPOS Automatic Update Program.cs channel accessible

A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Executing a manipulation of the argument version/url/packagekey/package name can lead to channel accessible by non-endpoint...

EUVD-2026-87110

A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Executing a manipulation of the argument version/url/packagekey/package name can lead to channel accessible by non-endpoint...

CVE-2026-97866: Channel Accessible by Non-Endpoint

A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Executing a manipulation of the argument version/url/packagekey/package name can lead to channel accessible by non-endpoint...

PT-2026-98869

Name of the Vulnerable Software and Affected Versions Zhonglun CloudPOS version 3.0 Description A weakness exists in the Automatic Update component within the Program.cs file. A remote attacker can manipulate the version, url, packagekey, and package name arguments to make a channel accessible to...

Fedora 43 : cockpit (2026-edff423bf7)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-edff423bf7 advisory. Automatic update for cockpit-367-1.fc43. Changelog for cockpit Thu Aug 27 2026 Packit - 367-1 - Translation updates Tenable has extracted the preceding...

Fedora 46 : perl-Net-OAuth (2026-96404091a4)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-96404091a4 advisory. Automatic update for perl-Net-OAuth-0.33-1.fc46. Changelog Thu Aug 27 2026 Xavier Bachelot - 0.33-1 - Update to 0.32 RHBZ2517683 - Fixes...

Malicious code in tt-help-cli-ycl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6144be61d70f258741e5d4cc1476021f93e3ce82ffa00a3f86189537a1438a6 The package's tt-help watchdog subcommand starts a long-running agent that POSTs heartbeats to a remote server default hardcoded to...

Fedora 45 : docker-buildkit (2026-26c0a0ee30)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-26c0a0ee30 advisory. Automatic update for docker-buildkit-0.32.1-1.fc45. Changelog Mon Aug 3 2026 Bradley G Smith - 0.32.1-1 - Update to release v0.32.1 - Upstream fixes...

Fedora 45 : libwignernj (2026-dfc357f705)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-dfc357f705 advisory. Automatic update for libwignernj-0.8.0-1.fc45. Changelog Fri Jul 24 2026 Susi Lehtola - 0.8.0-1 - Update to 0.8.0. Fri Jul 24 2026 Python Maint - 0.7.0-7 -...

Fedora 45 : audit (2026-ec653eca58)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ec653eca58 advisory. Automatic update for audit-4.2-2.fc45. Changelog Fri Jul 24 2026 Steve Grubb 4.2-2 - Truncate comm instead of rejecting invalid length Thu Jul 23 2026 Steve...

Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution

Claude Code's worktree handling allowed creation of worktrees named ".git" and navigation to worktrees outside the sandbox context, enabling git directory confusion attacks. By exploiting symlink manipulation and git fsmonitor execution during worktree operations, an attacker could overwrite file...

Fedora 45 : python-oracledb (2026-f75e94cb20)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f75e94cb20 advisory. Automatic update for python-oracledb-4.0.2-1.fc45. Changelog Wed Jul 22 2026 Packit - 4.0.2-1 - Update to 4.0.2 upstream release - Resolves: rhbz2500543 Wed...

Malicious code in netcontrol-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967b375e5686bd1eab74838f00cd21c2a8e15291f03a8140b494a83052fd2a92 netcontrol-agent.js implements a remote agent that long-polls a configured server URL and pipes the returned bytes directly into an interactive shell...

Veeam Software Appliance/Veeam Infrastructure Appliance — Updater Component Vulnerability

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

Fedora 45 : ipp-usb (2026-7eaf5e3510)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7eaf5e3510 advisory. Automatic update for ipp-usb-0.9.34-2.fc45. Changelog Tue Jun 30 2026 Zdenek Dohnal - 0.9.34-2 - ipp-usb-0.9.34 is available fedora2463247,...

Fedora 45 : jq (2026-b43264dedb)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b43264dedb advisory. Automatic update for jq-1.8.2-4.fc45. Changelog Sat Jun 20 2026 Filipe Rosset - 1.8.2-4 - removed old upstreamed patches Sat Jun 20 2026 Filipe Ross...

PT-2026-66881

Уязвимость механизма автоматического обновления ПАК ViPNet Coordinator HW 4, ViPNet Coordinator IG 4 и ViPNet xFirewall 5, связанная с избыточными возможностями разархивирования обновления. Эксплуатация уязвимости может позволить нарушителю, действующему с предварительно скомпрометированного ЦУС...