MiracleLinux 9 : python3.9-3.9.18-3.el9_4.5 (AXSA:2024-8758:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8758:05 advisory. cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection CVE-2024-6923 Tenable has extracted the preceding...

MiracleLinux 8 : mariadb:10.3 (AXSA:2021-1698:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1698:01 advisory. mariadb: writable system variables allows a database user with SUPER privilege to execute arbitrary code as the system mysql user CVE-2021-27928 Tenable has...

CVE-2026-1125

creationtimestamp| type| source ---|---|--- 2026-01-18 18:06:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcpprgmk5m2h 2026-07-04 01:01:35+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b82e6d59-2cf9-44dc-8b8d-09ccd4f08699...

CVE-2026-23845

creationtimestamp| type| source ---|---|--- 2026-01-18 08:34:24+00:00| published-proof-of-concept| https://github.com/axllent/mailpit/security/advisories/GHSA-6jxm-fv7w-rw5j 2026-07-20 18:00:49+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mr3urupfyo2u...

CVE-2026-1050

creationtimestamp| type| source ---|---|--- 2026-01-17 20:22:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcngvzkexm25...

CVE-2026-0959

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service...

CVE-2025-68970

creationtimestamp| type| source ---|---|--- 2026-01-14 06:12:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcefybseyi2q...

CVE-2026-0491

creationtimestamp| type| source ---|---|--- 2026-01-13 03:02:15+00:00| seen| Telegram/gzP7g7M5unxqeE0obsD0sG4W6mS1OWin9PANHO7snP8yfs 2026-01-13 06:48:14+00:00| seen| https://vulnerability.circl.lu/bundle/79cf05e4-8e7e-4859-b145-d69bffb52412 2026-01-13 07:01:37+00:00| seen|...

CVE-2025-50334

creationtimestamp| type| source ---|---|--- 2026-01-08 16:42:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115860473488145891 2026-01-08 20:02:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwrl2am6i2a...

CVE-2025-10569

creationtimestamp| type| source ---|---|--- 2026-01-08 14:15:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbw66qsi4d2u 2026-01-09 11:04:06+00:00| seen| Telegram/IU-GZhw3lwdB2YPQBPPJszhGuDqQLNcVlkfgMniUsf5QLI 2026-01-09 13:16:41+00:00| seen|...

CVE-2025-69169

creationtimestamp| type| source ---|---|--- 2026-01-08 10:26:46+00:00| seen| https://gist.github.com/Darkcrai86/9069e8978daf1e2d78679525d48adbfa 2026-01-08 13:03:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbw26h2qjg2x...

CVE-2026-0697

The CVE-2026-0697 entry concerns code-projects Intern Membership Management System 1.0. A flaw in /intern/admin/edit_admin.php arises from manipulating the admin_id argument, causing an SQL injection vulnerability. The issue can be exploited remotely, and published exploits exist. Multiple connec...

CVE-2026-21682

creationtimestamp| type| source ---|---|--- 2026-01-07 21:47:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbugyrfjog2e 2026-01-07 22:11:38+00:00| seen| Telegram/jO7QlYrwcf3hjfx3ScBgpS7153MfwFyypIrzpKferFw0p6I...

CVE-2025-14022

creationtimestamp| type| source ---|---|--- 2026-01-07 17:07:51+00:00| seen| Telegram/S7e73uQGRz2g4329uFgFshdmbcpucfN1UlxU6fp487LZwx8...

WordPress AA Block country plugin <= 1.0.1 - Unauthenticated IP Address Spoofing via X-Forwarded-For Header vulnerability

Unauthenticated IP Address Spoofing via X-Forwarded-For Header vulnerability discovered by Ivan Cese in WordPress Plugin AA Block country versions = 1.0.1...

mingw packages security and bug fix update

An update is available for mingw-binutils, mingw-bzip2, mingw-sqlite. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MinGW is a free and open source software...

CVE-2025-14524

creationtimestamp| type| source ---|---|--- 2026-01-07 06:21:41+00:00| seen| https://seclists.org/oss-sec/2026/q1/33 2026-01-07 07:51:28+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/115852724607348302 2026-01-07 08:11:17+00:00| seen|...

CVE-2025-15198

creationtimestamp| type| source ---|---|--- 2026-01-05 22:07:24+00:00| seen| Telegram/Ue9D88akPtcSqJqcQnzdsM4jMnd7f4RtTY-JP7TQys-dy8...

CVE-2025-64121

Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Authentication Bypass.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...

CVE-2025-15407

creationtimestamp| type| source ---|---|--- 2026-01-01 18:28:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbez2vrux42y 2026-01-02 18:52:25+00:00| published-proof-of-concept| Telegram/frMBNFr4dxsb7OolQ--BQHkgd4kUrm0gGJMdqCQX5AgtUdY 2026-01-02 21:54:16+00:00|...