Linux Distros Unpatched Vulnerability : CVE-2026-106307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system...

SUSE SLES12 Security Update : docker-stable (SUSE-SU-2026:4533-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4533-1 advisory. - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header...

Security update for prometheus-blackbox_exporter (important)

openSUSE security update: security update for prometheus-blackboxexporter ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22026-1 Rating: important References: bsc1236515 bsc1238680 bsc1266556 bsc1279126 Cross-References: CVE-2023-45288 CVE-2025-228...

SUSE SLES15: docker-stable / docker-stable-bash-completion / etc (SUSE-SU-2026:4535-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4535-1 advisory. - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header...

Security update for golang-github-prometheus-alertmanager (important)

openSUSE security update: security update for golang-github-prometheus-alertmanager ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22027-1 Rating: important References: bsc1266615 bsc1269834 Cross-References: CVE-2026-2303 CVE-2026-39821 CVSS score...

RHEL 10 / 8 / 9 : Red Hat JBoss Web Server 7.0.2 (RHSA-2026:76952)

The remote Redhat Enterprise Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76952 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised ...

AlmaLinux 8 : dovecot (ALSA-2026:76763)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:76763 advisory. dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters CVE-2026-42391 dovecot: Dovecot: Authentication bypass via incorrect...

Linux Distros Unpatched Vulnerability : CVE-2026-106185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system...

Restrict route by IP - Critical - Access bypass - SA-CONTRIB-2026-216

This module enables you to restrict access to routes by IP address. The module doesn't reliably restrict a subset of dynamic routes, leading to an access bypass vulnerability. The impact depends on how a site uses this module and whether it has any routes that are dynamic...

RockyLinux 8 : dovecot (RLSA-2026:76763)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:76763 advisory. dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters CVE-2026-42391 dovecot: Dovecot: Authentication bypass via incorrect...

CVE-2026-106361

An incorrect provision of specified functionality flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513781133...

CVE-2026-106331

An improper input validation flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553256068...

CVE-2026-106301

A confused deputy flaw was found in the Contextual Tasks component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/523750306...

CVE-2026-106359

A confused deputy flaw was found in the DeviceBoundSessionCredentials component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/500532594...

CVE-2026-106326

A confused deputy flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/511745101...

CVE-2026-106266

A confused deputy flaw was found in the Contextual Tasks component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/501914204...

CVE-2026-103009

A flaw was found in Elasticsearch. When processing cross-cluster search requests under the Remote Cluster Security RCS model, the service validates permissions using one target identifier while retrieving data using a separate identifier. An authenticated attacker possessing a valid cross-cluster...

CVE-2026-89182

With repository FORCEPRIVATE = true, Gitea creates new repositories as private, but the post-receive hook still applied the repo.private=false push option to an empty repository created by push. Any user who can create repositories could make their new repository public in violation of the instan...

CVE-2026-106503

Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by scaffolder action input authorization bypass. An authenticated user with access to affected Scaffolder templates could bypass...

CVE-2000-0979

CVE-2000-0979 CVE-2000-0979.rb — это автономный инструмент для эксплуатации CVE-2000-0979 против службы SMB Windows 95. msf20000979.rb — это модуль Metasploit. Вы можете скопировать его в ⁨metasploit-framework⁩ ▸ ⁨modules⁩ ▸ ⁨auxiliary⁩ ▸ scanner⁩ ▸ ⁨smb⁩ Более подробная документация появится в...