EUVD-2025-206357

The program libraries DLL and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is the function "EncryptAndDecrypt" in the library Kaba.EXOS.common.dll. This algorithm uses a simple XOR encryption technique combined with a cryptographic key cryptoKey to transform...

RHEL 8 : poppler (RHSA-2026:1091)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1091 advisory. Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Security Fixes: poppler: Out-of-Bounds Read in...

openSUSE Security Advisory (SUSE-SU-2026:0231-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-13920

creationtimestamp| type| source ---|---|--- 2026-01-24 15:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md6lhavi642c 2026-03-17 02:22:55+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-13920.yaml 2026-03-17...

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2026-0528 vulnerabilities

Vulnerabilities for packages: apm-server-fips, beats, cloudbeat, apm-server, cloudbeat-fips...

CVE-2026-23831 vulnerabilities

Vulnerabilities for packages: goreleaser, flux-source-controller, flux-source-controller-fips, skaffold, tflint-fips, zot, trivy-operator-fips, chainctl, policy-controller, kubescape, cloudbeat, cloudbeat-fips, kyverno-policy-reporter-plugins-kyverno-fips, trivy-fips, falcoctl-fips, tkn-fips,...

comet-common (>=1.0.5, <=2.0.1), iconrpcserver (>=1.0.3, <=1.1.2.1) +2 more potentially affected by CVE-2026-0994 via protobuf (3.5.1)

protobuf PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - comet-common =1.0.5, =1.0.3, =1.1.2.1 - melon-music-player 3.0.0a0 - noquant-futu 5.10.2208 Source cves: CVE-2026-0994 Source advisory:...

CVE-2025-13917

creationtimestamp| type| source ---|---|--- 2026-01-23 13:00:22+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3md3qyq7v5r2q...

CVE-2026-0927

creationtimestamp| type| source ---|---|--- 2026-01-23 07:23:16+00:00| seen| https://gist.github.com/Darkcrai86/30221df75e8d29c4c44a72efd5f3ce5b 2026-01-23 07:44:49+00:00| seen| https://gist.github.com/Darkcrai86/f6ceca6b6f5861138955c1b1e47ded28 2026-01-23 07:59:20+00:00| seen|...

CVE-2026-24388

creationtimestamp| type| source ---|---|--- 2026-01-22 17:30:15+00:00| seen| https://gist.github.com/Darkcrai86/a5cf9a93fd0e74ef40fc1c5974331a2e 2026-01-22 19:16:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mczvkklgul2j...

Security update for exiv2-0_26

This update for exiv2-026 fixes the following issues: Add reference for previously fixed issue: CVE-2025-55304: Fixed quadratic performance algorithm in the ICC profile parsing code of JpegBase::readMetadata bsc1248963. Patch Instructions: To install this SUSE update use the SUSE recommended...

Malicious Package

Overview @alluxio/common-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @alluxio/common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f082b7a72d74e881f10d6e0f01c1aef7a0a07b0f446d5a9d31a4763ffed2ed8 The package @alluxio/common-ui was found to contain malicious code. Source: ghsa-malware...

MAL-2026-451 Malicious code in @alluxio/common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f082b7a72d74e881f10d6e0f01c1aef7a0a07b0f446d5a9d31a4763ffed2ed8 The package @alluxio/common-ui was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-4194

Malicious code in @alluxio/common-ui npm...

CVE-2026-24001

creationtimestamp| type| source ---|---|--- 2026-01-22 05:04:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcyfwkwe6i2n 2026-01-23 12:01:03+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3md3nonjr7e2h 2026-03-19 00:00:00+00:00| seen|...

PT-2026-4609

CVE-2023-32720 - Apache HTTP Server Remote Code Execution CVE ID : CVE-2023-32720 Published : Jan. 22, 2026, 10:16 a.m. | 50 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. Severity: 0.0 | NA Visit the link for more details, such as CVSS...

Azure Linux 3.0 Security Update: libcontainers-common (CVE-2024-1753)

The version of libcontainers-common installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1753 advisory. - A flaw was found in Buildah and subsequently Podman Build which allows containers to mount...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49996)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49996 advisory. - In the Linux kernel, the following vulnerability has been resolved: cifs: Fix buffer overflow when parsing N...