74316 matches found
CGA-FFJQ-F8HQ-RXMM
Bulletin has no description...
MINI-8G7Q-P59C-GJP4
Bulletin has no description...
MINI-GX3X-27J8-93M7
Bulletin has no description...
CVE-2026-79657
creationtimestamp| type| source ---|---|--- 2026-08-25 14:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtvykcwfyn24 2026-08-25 21:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtwrt2mobg2t 2026-08-28 15:00:04+00:00| published-proof-of-concept|...
CVE-2026-78581
Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier t...
MINI-W64V-36GH-VHP9
Bulletin has no description...
CGA-6RHM-V2WP-73M4
Bulletin has no description...
PT-2026-81309
Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An authorization bypass exists where an authenticated user can reference another user's AI Assistant conversation identifier to access or modify conversations they do not own. This occurs...
Oracle Linux 9 : python-urwid (ELSA-2026-58952)
The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-58952 advisory. - Fix CVE-2026-9323: use cryptographically secure session identifiers in web display module Tenable has extracted the preceding description block directly from...
PT-2026-81484
Name of the Vulnerable Software and Affected Versions Airbyte Platform affected versions not specified Description An issue exists where the platform determines the workspace for authorization decisions based on a field supplied by the caller. The AuthorizationServerHandler copies recognized...
CGA-6J2W-V2MX-HMJV
Bulletin has no description...
CVE-2026-9254
creationtimestamp| type| source ---|---|--- 2026-08-24 18:24:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/art4thq7cr3uc 2026-08-25 01:49:19+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtupbsljrs26 2026-08-25 16:45:02+00:00| seen|...
Astra Linux – Vulnerability in Golang 1.19, Golang 1.23
The matching of hosts against proxy patterns may improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to “.example.com”, a request to “::1%25.example.com:80” will be incorrectly matched and not be proxied...
Astra Linux – Vulnerabilities in Linux-6.1, Linux-5.15, Linux-5.10
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fixed a use-after-free of work objects after the cmid is destroyed. The commit 59c68ac31e15 “iwcm: Free cmid resources on the last deref” simplified cmid resource management by freeing the cmid once all references to i...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: netsched: Prevent the creation of classes with TCHROOT. The function qdisctreereducebacklog uses TCHROOT as a termination condition when traversing the qdisc tree to update parent backlogs. However, if a class is created with...
Astra Linux – Vulnerability in Firefox
A malicious website might have included an iframe with a malformed URI, resulting in a non-exploitable browser crash. This vulnerability affects Firefox versions earlier than 126...
Astra Linux – Vulnerability in Linux
A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through version 5.9.13. Files drivers/tty/ttyio.c and drivers/tty/ttyjobctrl.c may allow a read-after-free attack on TIOCGSID, also known as CID-c8bcd9c5be24...
PT-2026-80852
The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL survive into the outgoing request. The payment get, capture, cancel, paymentRefund create, total, list, get, advancedPayment get,...
