D-Link Network Attached Storage - Command Injection and Backdoor Account

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument...

PT-2026-119151

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: UIF Open UI. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of...

Oracle E-Business Suite: CVE-2026-83391: Critical Patch Update

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll Year End. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...

PT-2026-119972

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Communications Panel/Dashboard. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User...

PT-2026-119586

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll Year End. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...

PT-2026-119937

Name of the Vulnerable Software and Affected Versions Oracle Identity Manager versions 12.2.1.4.0 Oracle Identity Manager versions 14.1.2.1.0 Description An issue exists in the End User Self Service component of Oracle Fusion Middleware. An unauthenticated attacker with network access via T3 or...

Oracle Identity Manager Authorization Vulnerability

Oracle Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0 have an authorization issue vulnerability. This vulnerability stems from issues with the End User Self Service component, which may allow unauthenticated attackers to access and take control of Oracle Identity Manager through the T3 and...

Oracle HRMS (US) security vulnerabilities

A security vulnerability exists in Oracle HRMS US versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the US Payroll Year End component. It may allow low-privilege attackers to access HTTP-based interfaces, enabling unauthorized updates, insertions, or deletions of certai...

Malicious code in a-vailable-al-bum-file-the-world-wont-end-7io2n-pbncia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a3de985ebc9e2a00f5373d91fa6cb4289d523f15eedf107dbc88812770218f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17964 Malicious code in a-vailable-al-bum-file-the-world-wont-end-7io2n-pbncia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a3de985ebc9e2a00f5373d91fa6cb4289d523f15eedf107dbc88812770218f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in a-vailable-al-bum-file-the-world-wont-end-7io2n-pbncia

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview a-vailable-al-bum-file-the-world-wont-end-7io2n-pbncia is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ublk: Fix for deadlock when reading the partition table When a process such as udev opens the ublk block device e.g., to read the partition table using bdevopen, a deadlock can occur: 1. bdevopen grabs the disk-openmutex. 2. The...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: f2fs: a fix was made to avoid a Use-After-Free issue in f2fswriteendio. According to syzbot, a use-after-free issue occurred in f2fswriteendio. This issue is caused by the following race condition: Loop device Unmount Worker...

Astra Linux – vulnerability in linux-5.10

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSETMAX Dan Aloni reports: Due to commit 8cfb9015280d “NFS: Always provide aligned buffers to the RPC read layers” on the client, a read of 0xfff is aligned up to server rsize of 0x1000. As a...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Unconditionally wait for ENDXFER completion after issuing the command Currently, all controller IP/revisions except DWC3usb3 = 310a must unconditionally wait up to 1 ms for ENDXFER to complete when IOC is not set. This...

Astra Linux – vulnerability in libxpm

A flaw was found in libXpm. This issue occurs when parsing a file with a comment that is not closed; the end-of-file condition will not be detected, causing an infinite loop and resulting in a Denial of Service for the application relying on the library...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftsetrbtree: Fixed an issue with overlapping expiration walks. The lazy garbage collection during insertion, which should remove entries when the timeout occurs, fails to properly release the remaining part of the...

Astra Linux – Vulnerability in Apache Log4j1.2

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter, where the values to be inserted are converted using PatternLayout. The message converter %m is likely to always be included. This allows attackers to manipulate SQL statements by entering crafted...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm, thp: Bail out early for writeback pages in collapsefile Currently, collapsefile does not explicitly check PGwriteback. Instead, pagehasprivate and trytoreleasepage are used to filter writeback pages. This approach does not wo...