Dissector ISO 15765 Analyzers Wireshark Data Compromise

The vulnerability of the ISO 15765 and ISO 10681 discrivers of the Wireshark network traffic analyzer is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker operating remotely to compromise the integrity and accessibility of...

CentOS Linux 8 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1777883924)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1777883924 advisory. - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams...

CVE-2026-97612

A flaw was found in the Linux kernel's Multiprotocol Label Switching MPLS networking subsystem. When all labels are removed from an encapsulated packet, the kernel fails to clear internal protocol tracking metadata, leaving stale network header references. An attacker could exploit this flaw by...

CVE-2026-71897

An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-move endpoints to operate on workflows in projects for which they lack the required permissions. This may allow the user to copy or move workflows from unauthorized projects. Th...

firefox: thunderbird: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component...

CVE-2026-71897 Apache DolphinScheduler: Allows unauthorized workflow operations through batch-copy and batch-move endpoints

An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-move endpoints to operate on workflows in projects for which they lack the required permissions. This may allow the user to copy or move workflows from unauthorized projects. Th...

CVE-2026-71897 Apache DolphinScheduler: Allows unauthorized workflow operations through batch-copy and batch-move endpoints

An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-move endpoints to operate on workflows in projects for which they lack the required permissions. This may allow the user to copy or move workflows from unauthorized projects. Th...

EUVD-2026-88819

An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-move endpoints to operate on workflows in projects for which they lack the required permissions. This may allow the user to copy or move workflows from unauthorized projects. Th...

CVE-2026-71897

Apache DolphinScheduler versions prior to 3.4.3 are vulnerable to an improper authorization check within the batch-copy and batch-move endpoints. An authenticated user can exploit this flaw to operate on workflows in projects for which they lack the necessary permissions, potentially allowing the...

CVE-2026-97149

A flaw was found in OpenStack Swift's tempurl middleware. A TempURL is a signed, time-limited link that should allow access to only one object. The signature does not cover extra request headers, and Swift did not block the X-Copy-From header on these signed upload requests. An attacker who alrea...

Sangoma Switchvox CVE-2026-9586 /pa SQLi RCE

Exploits CVE-2026-9586 via the unauthenticated /pa XML phone-notification endpoint. Injects stacked PostgreSQL into the PhoneIP field and uses COPY ... TO PROGRAM to run a shell command as the database superuser. !/usr/bin/env python3 -- coding: utf-8 -- """Sangoma Switchvox CVE-2026-9586...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

Copy Fail CVE-2026-31431 — Kubernetes Container Escape PoC...

[SECURITY] [DLA 4801-1] swift security update

Debian LTS Advisory DLA-4801-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara September 29, 2026 https://wiki.debian.org/LTS Package : swift Version : 2.30.1-0+deb12u3 CVE ID : CVE-2026-71191 CVE-2026-97149 Debian Bug : 1142972 1148834 Two...

Debian dla-4801 : python3-swift - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4801 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4801-1 [email protected]...

CVE-2026-100395

lxc-copy host-context hostname update follows symlink...

PT-2026-102612

An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-move endpoints to operate on workflows in projects for which they lack the required permissions. This may allow the user to copy or move workflows from unauthorized projects. Th...

UBUNTU-CVE-2026-100395

lxc-copy host-context hostname update follows symlink...

PT-2026-102761

Name of the Vulnerable Software and Affected Versions NetX Duo TFTP server affected versions not specified Description The TFTP server fails to validate the upper bound of DATA datagram sizes, ignoring the protocol maximum of 4 + NX TFTP FILE TRANSFER MAX. This lack of validation leads to two...

ROS-20260929-73-0134

The vulnerability of the bnadgetethtoolstats function in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-71897: Incorrect Authorization

An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-move endpoints to operate on workflows in projects for which they lack the required permissions. This may allow the user to copy or move workflows from unauthorized projects. Th...