DEBIAN-CVE-2025-59028

When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to DoS a vulnerable server to break concurrent logins. Install fixed version or disable concurrency in login processes hea...

CVE-2026-3113

creationtimestamp| type| source ---|---|--- 2026-03-27 03:00:09+00:00| seen| https://nvd.nist.gov/vuln/detail/CVE-2026-4274...

CVE-2026-25340

creationtimestamp| type| source ---|---|--- 2026-03-26 21:34:32+00:00| seen| Telegram/jvhOKmzqiPeYBdBxVFESt3SUAdqySxNGUXLiFxkgoqjLWk 2026-03-26 21:34:39+00:00| seen| Telegram/-QvDDLq1XmiKkWzrEeLXRlLt5ytYeUCyAFDlagxirK1YIk...

DEBIAN-CVE-2026-0968

A flaw was found in libssh in which a malicious SFTP SSH File Transfer Protocol server can exploit this by sending a malformed 'longname' field within an SSHFXPNAME message during a file listing operation. This missing null check can lead to reading beyond allocated memory on the heap. This can...

CVE-2026-25306

creationtimestamp| type| source ---|---|--- 2026-03-26 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mhyiuuu3sm2o 2026-04-09 05:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj23blrhm62h...

CVE-2026-4197

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function...

CVE-2026-4468

A vulnerability was determined in Comfast CF-AC100 2.6.0.8. Affected is an unknown function of the file /cgi-bin/mbox-config?method=SET=updateinterfacepng. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and ma...

Security Bulletin: Vulnerability in IBM® Java SDK affects IBM Common Licensing due to CVE-2026-1188

Summary There is a vulnerability in the IBM® SDK, Java™ Technology Edition that is shipped with IBM LKS Administration and Reporting Tool ART and Administration Agent. Vulnerability Details CVEID:CVE-2026-1188 DESCRIPTION: In the Eclipse OMR port library component since release 0.2.0, an API...

SUSE-SU-2026:1062-1 Security update for python310

This update for python310 fixes the following issues: Update to Python 3.10.20: - CVE-2025-6075: quadratic complexity in os.path.expandvars bsc1252974. - CVE-2025-11468: header injection with carefully crafted inputs bsc1257029. - CVE-2025-12084: quadratic complexity in xml.minidom node ID cache...

BELL-CVE-2026-23363

Bulletin has no description...

BELL-CVE-2026-23330

Bulletin has no description...

CVE-2026-33348

creationtimestamp| type| source ---|---|--- 2026-03-25 23:20:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwa4h2itl2j 2026-03-26 01:20:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwgse3ypw2j 2026-03-26 19:00:15+00:00| seen|...

CVE-2025-13078

creationtimestamp| type| source ---|---|--- 2026-03-25 14:30:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhvchlod2p25 2026-03-25 18:44:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvqnsl7352n 2026-03-26 03:00:00+00:00| seen|...

DEBIAN-CVE-2026-23306

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free in pm8001queuecommand Commit e29c47fe8946 "scsi: pm8001: Simplify pm8001taskexec" refactors pm8001queuecommand, however it introduces a potential cause of a double free scenario when it changes th...

DEBIAN-CVE-2026-23294

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in devmap on PREEMPTRT On PREEMPTRT kernels, the per-CPU xdpdevbulkqueue bq can be accessed concurrently by multiple preemptible tasks on the same CPU. The original code assumes bqenqueue and devflush run atomically...

DEBIAN-CVE-2026-23288

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix out-of-bounds memset in command slot handling The remaining space in a command slot may be smaller than the size of the command header. Clearing the command header with memset before verifying the available slo...

CVE-2026-23373

In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Don't default to -EOPNOTSUPP in rsimac80211config This triggers a WARNON in ieee80211hwconfinit and isn't the expected behavior from the driver - other drivers default to 0 too...

CVE-2026-33979

creationtimestamp| type| source ---|---|--- 2026-03-25 09:33:42+00:00| published-proof-of-concept| https://github.com/AhmedAdelFahim/express-xss-sanitizer/security/advisories/GHSA-3843-rr4g-m8jq 2026-03-27 22:19:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi35ltqsqv27...

[SECURITY] Fedora 43 Update: python-multipart-1.3.1-1.fc43

This module provides a fast incremental non-blocking parser for multipart/form-data HTML5, RFC7578, as well as blocking alternatives for easier use in WSGI or CGI applications...

CVE-2026-4719

creationtimestamp| type| source ---|---|--- 2026-03-25 01:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtvau2g4m2p 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 04:01:27+00:00|...