MINI-MFW8-RMW4-5X6M

Bulletin has no description...

CVE-2026-67447

creationtimestamp| type| source ---|---|--- 2026-08-20 22:35:02+00:00| published-proof-of-concept| https://github.com/axllent/mailpit/security/advisories/GHSA-r553-m4fv-5v97...

CVE-2026-19755 NoSleep 1.5.1 - Unauthorized disclosure of root-owned files through privileged XPC helper

NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled command and NSBundlePath values.This issue affects NoSleep: 1.5.1...

EUVD-2026-63534

Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable. The servestatic method always sets the Cache-Control header to "public", with no means of overriding it. This advises proxies that the content may be stored in a shared cache, and may be reused i...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libxml2: libxml2-16-2.15.3-0.1.3.hum1 aarch64, x8664 libxml2-2.15.3-0.1.3.hum1 aarch64, x8664 libxml2-devel-2.15.3-0.1.3.hum1 aarch64, x8664 libxml2-static-2.15.3-0.1.3.hum1 aarch64, x8664...

GHSA-P9R8-2Q67-FP86

creationtimestamp| type| source ---|---|--- 2026-08-20 14:00:04+00:00| published-proof-of-concept| Telegram/s3A4zS-xINsQCOFnw3lncQJfAtm8MI1VEo1sscCDdPigg 2026-08-20 16:00:50+00:00| seen| https://thehackernews.com/2026/08/nasa-ait-gui-flaws-could-let.html 2026-08-21 00:00:09+00:00|...

PT-2026-79179

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A kernel heap over-read allows a remote attacker to obtain sensitive information and cause a denial of service. A kernel heap over-read occurs when the system reads more dat...

CVE-2026-68900

creationtimestamp| type| source ---|---|--- 2026-08-19 21:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthmtw75wv2t...

CVE-2026-74473

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN implementation. An incorrect buffer length check in the routeshortcircuit function, specifically when using pskbmaypull, can lead to reading beyond the allocated buffer length. This occurs when processing IP headers in non-linear...

kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...

Malicious Package

Overview dolyame-boxy-independent-bnpl-info-images is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

MINI-8V3M-X55V-2RJ9

Bulletin has no description...

MINI-F49P-F5QH-FH78

Bulletin has no description...

MINI-798J-VM49-PVP5

Bulletin has no description...

CVE-2026-49425 Kernel stack disclosure in 32-bit compatibility support

The compat32 kevent handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It did not first zero the stack struct. An unprivileged user may observe a small amount of uninitialized kernel stack data, which may contain sensitive information...

CVE-2026-49424 Kernel stack disclosure in Linux compatibility layer

The Linux waitid implementation translates a FreeBSD siginfot struct into a stack-declared Linux siginfot. It did not first zero the stack struct. An unprivileged user may observe 104 bytes of uninitialized kernel stack data, which may contain sensitive information...

MINI-VR7M-MXCP-RGJQ

Bulletin has no description...

PT-2026-78659

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow...

Microsoft Visual Studio Products (August 2026)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. CVE-2026-62871 - Unchecked input for loop condition in .NET allows an unauthorized...

MAL-2026-14177 Malicious code in fast-glob-fast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7695ac02a2492bbf3118fc68514378edb201a93183f2dcb0035727781f31d408 fast-glob-fast is a name-squat of the popular fast-glob package its repository field even points at mrmlnc/fast-glob. The declared postinstall hook...