probable_subdomains

Probables subdominios Herramienta en línea: https://weakpass.com/generate/domains Resumen Durante los bug bounties, pruebas de penetración, ejercicios de red team y otras grandes actividades, siempre hay un momento en el que necesitas ejecutar amass, subfinder, sublister, o cualquier otra...

nodesub

NODESUB Nodesub es una herramienta de línea de comandos para encontrar subdominios en programas de bug bounty. Soporta diversas técnicas de enumeración de subdominios y proporciona opciones flexibles para personalización. Características Realizar enumeración de subdominios usando notación CIDR...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.26: golang1.26-1.26.9-0.1.hum1 aarch64, x8664 golang1.26-bin-1.26.9-0.1.hum1 aarch64, x8664 golang1.26-docs-1.26.9-0.1.hum1 noarch golang1.26-misc-1.26.9-0.1.hum1 noarch...

CVE-2026-98375: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.27: golang1.27-1.27.2-0.1.hum1 aarch64, x8664 golang1.27-bin-1.27.2-0.1.hum1 aarch64, x8664 golang1.27-docs-1.27.2-0.1.hum1 noarch golang1.27-misc-1.27.2-0.1.hum1 noarch...

GHSA-9RJX-3JCH-6VJF enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision

Summary A crafted SVG bypasses enshrined/svg-sanitize's href validation and delivers a javascript: URL through the sanitizer unchanged. The bypass exploits a semantic mismatch between XML entity resolution used during sanitization and HTML5 Named Character Reference resolution used by the browser...

enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision

Summary A crafted SVG bypasses enshrined/svg-sanitize's href validation and delivers a javascript: URL through the sanitizer unchanged. The bypass exploits a semantic mismatch between XML entity resolution used during sanitization and HTML5 Named Character Reference resolution used by the browser...

Important: Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security and bug fix updates

An update is now available for Red Hat Ceph Storage 8.1. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services. These new packages...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.72 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.72 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.75 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.75 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

OPENSUSE-SU-2026:12083-1 git-bug-0.11.0-2.1 on GA media

These are all security issues fixed in the git-bug-0.11.0-2.1 package on the GA media of openSUSE Tumbleweed...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nghttp2: libnghttp2-1.69.0-6.1.hum1 aarch64, s390x, x8664 libnghttp2-devel-1.69.0-6.1.hum1 aarch64, s390x, x8664 mingw32-libnghttp2-1.69.0-6.1.hum1 aarch64, s390x, x8664...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: popt: popt-1.19-11.2.hum1 aarch64, s390x, x8664 popt-devel-1.19-11.2.hum1 aarch64, s390x, x8664 popt-static-1.19-11.2.hum1 aarch64, s390x, x8664 popt-1.19-11.2.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: prometheus3.13: prometheus3.13-3.13.4-0.1.hum1 aarch64, x8664 prometheus3.13-3.13.4-0.1.hum1.src src...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.50 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.50 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

Apache APISIX - Remote Code Execution

A default configuration of Apache APISIX with default API key is vulnerable to remote code execution. An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. When the admin key was changed or the port of Admin API was changed to a port different...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: expat: expat-2.8.5-1.1.hum1 aarch64, s390x, x8664 expat-devel-2.8.5-1.1.hum1 aarch64, s390x, x8664 expat-static-2.8.5-1.1.hum1 aarch64, s390x, x8664 expat-2.8.5-1.1.hum1.src src...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet8.0: aspnetcore-runtime-8.0-8.0.31-0.1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-8.0-8.0.31-0.1.hum1 aarch64, x8664 aspnetcore-targeting-pack-8.0-8.0.31-0.1.hum1 aarch64, x8664...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet9.0: aspnetcore-runtime-9.0-9.0.20-0.1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-9.0-9.0.20-0.1.hum1 aarch64, x8664 aspnetcore-targeting-pack-9.0-9.0.20-0.1.hum1 aarch64, x8664...