RHSA-2026:57590 Red Hat Security Advisory: rh-podman-desktop security, bug fix, and enhancement update

Bulletin has no description...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-21-openjdk: java-21-openjdk-21.0.12.1.1-1.0.hum1 aarch64, x8664 java-21-openjdk-demo-21.0.12.1.1-1.0.hum1 aarch64, x8664 java-21-openjdk-demo-fastdebug-21.0.12.1.1-1.0.hum1 aarch64, x8664...

curl security, bug fix, and enhancement update

An update is available for curl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The curl packages provide the libcurl library and the curl utility for downloadi...

InjuredAndroid

InjuredAndroid - CTF Una aplicación Android vulnerable con ejemplos de ctf basados en hallazgos de bug bounty, conceptos de explotación y pura creatividad. ¡Ahora disponible en Google Play! https://play.google.com/store/apps/details?id=b3nac.injuredandroid Configuración para un dispositivo físico...

megplus

meg+ Obsoleto Envoltorio automatizado de reconocimiento — TomNomNom's meg con esteroides. Creado por TomNomNom y EdOverflow. Acerca de Este envoltorio automatizará numerosas tareas y te ayudará durante tu proceso de reconocimiento. El script encuentra problemas comunes, frutos maduros low-hanging...

kenzer

KENZER - Enumeración y escaneo automatizado de activos web DEPRECATED Menciones Una introducción conceptual a la automatización de Bug Bounties Demo Capturas de pantalla Instrucciones para ejecutar 0. Ejecuta git clone https://github.com/ARPSyndicate/kenzer /home/ubuntu/kenzer && cd...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

socialhunter

socialhunter !IMPORTANT This tool is no longer working, and we won't be able to fix it as it has become difficult to bypass social media protections. Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct phishing attack...

halogen

Halogen is a tool to automate the creation of yara rules based on the image files embedded within a malicious document. This can assist cyber security professionals in writing detection rules for malicious threats as well as help responders in identifying with particular threat they are dealing...

probable_subdomains

Probable subdomains Online tool: https://weakpass.com/generate/domains TL;DR During bug bounties, penetrations tests, red teams exercises, and other great activities, there is always a room when you need to launch amass, subfinder, sublister, or any other tool to find subdomains you can use to...

MINI-F7XG-MW33-JVWX

Bulletin has no description...

EUVD-2026-63656

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, applications that define unusual custom libvips sources and use them to process untrusted uncompressed PPM images can trigger a max/min error in vipssourcereadtomemory in libvips/iofuncs/source.c. The...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-25-openjdk: java-25-openjdk-25.0.4.1.1-1.1.hum1 aarch64, x8664 java-25-openjdk-crypto-adapter-25.0.4.1.1-1.1.hum1 aarch64, x8664 java-25-openjdk-crypto-adapter-fastdebug-25.0.4.1.1-1.1.hum1...

cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack

A flaw was found in the 'go bug' command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system's temporary directory could exploit this by creating a symbolic link symlink with one of these predictable...

CVE-2026-73256 Mongoose: HTTP/1.0 detection off-by-one enables request smuggling via chunked TE

Mongoose is an embedded web server and network library. Prior to 7.22, a remote unauthenticated attacker can exploit an HTTP/1.0 reverse-proxy deployment by sending a request with Transfer-Encoding: chunked and conflicting framing. The httpcb function in src/http.c tests hm.proto.len with an...

CVE-2026-74323

A flaw was found in the MediaTek mt7996 Wi-Fi driver within the Linux kernel. When the mt7996txprepareskb routine fails to look up linkconf or linksta, it can lead to a memory leak by not releasing an already allocated transmission token. This issue could potentially impact system stability or...

CVE-2026-74308

A flaw was found in the Linux kernel's ext4 filesystem. When the data=journal mount option is enabled, the ext4journalledwriteend function can incorrectly attempt to write inline data. This occurs if a prior attempt to convert inline data to an extent failed, leading to an inconsistent state. An...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.70 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.70 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.96 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.96 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...