PT-2026-109878

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw allows authenticated users with low privileges to create message templates. By calling the POST '/sys/message/sysMessageTemplate/add' endpoint, an attacker can insert arbitrar...

CVE-2026-108619: Missing Authorization

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete message templates via the DELETE /sys/message/sysMessageTemplate/deleteBatch endpoint. Attackers can supply comma-separated template ids from the unguarded list endpoint...

CVE-2026-108625: Missing Authorization

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message push records by calling PUT /sys/message/sysMessage/edit. Attackers can submit a request body naming any syssms record id to overwrite its title, content, receiv...

Linux Distros Unpatched Vulnerability : CVE-2026-106428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed...

PT-2026-109902

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' in-application messages via the getOne handler of SysAnnouncementSendController. Attackers can obtain delivery record ids from the unguarded...

CVE-2026-108642: Authorization Bypass Through User-Controlled Key

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysAnnouncementSendController that allows authenticated users to modify other users' message delivery records. Attackers can obtain delivery ids from GET /sys/sysAnnouncementSend/list and submit edit requests that overwrite...

PT-2026-109650

Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossn com.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequenti...

MGASA-2026-0479 Updated tomcat package fixes security vulnerabilities

OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. CVE-2026-73581 Cross-context authentication mix-up with Jakarta Authentication configured. CVE-2026-75973 Bypass of security constraints for WebSocket endpoints. CVE-2026-76183 Transfer-Encoding honored for...

MGASA-2026-0480 Updated xdg-dbus-proxy package fixes a security vulnerability

Message filtering bypass via reply serial. CVE-2026-94422...

Updated tomcat package fixes security vulnerabilities

OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. CVE-2026-73581 Cross-context authentication mix-up with Jakarta Authentication configured. CVE-2026-75973 Bypass of security constraints for WebSocket endpoints. CVE-2026-76183 Transfer-Encoding honored for...

Updated xdg-dbus-proxy package fixes a security vulnerability

Message filtering bypass via reply serial. CVE-2026-94422...

Open Source Social Network Authorization Issue Vulnerability

The Open Source Social Network OSSN versions 10.1 and earlier have a vulnerability related to authorization. This vulnerability stems from an insecure direct object reference in the components/OssnMessages/ossncom.php file. Authorized attackers can read private message attachments of other users...

CVE-2026-104083

SmarterMail versions before build 9777 are vulnerable to a stored mutation cross-site scripting (XSS) vulnerability. The root cause lies in a custom HTML sanitizer that incorrectly treats a element nested within MathML foreign content (specifically ) as inert CDATA text, while browsers reparse i...

EUVD-2026-95888

SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that allows remote attackers to inject executable script by placing payloads inside a element nested within MathML foreign content , which the custom HTML sanitizer treats as inert CDATA text but browsers...

CVE-2026-104083 SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign Content

SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that allows remote attackers to inject executable script by placing payloads inside a element nested within MathML foreign content , which the custom HTML sanitizer treats as inert CDATA text but browsers...

SUSE-SU-2026:24196-1 Security update for pacemaker

This update for pacemaker fixes the following issues: Security issue fixed: - CVE-2026-10649: denial of service via integer overflow in remote message decompression bsc1268381. Changes for pacemaker: Update to version 3.0.3+20260728.7052efa194: - cts: make cts-scheduler -o/--out-dir default to a...

brokentooth

brokentooth POC para CVE-2018-4327 al menos eso creo, ya que @SparkZheng discutió tanto CVE-2018-4327 como CVE-2018-4330, pero no queda claro por su parte cuál se relaciona con cada bug; pero como describió este primero, me lanzo a adivinar. Probado en iPhone 6S 11.3.1 Debería funcionar hasta 11....

Pre-shared key mode transmits the TGK in cleartext, exposing the SRTP master key

mykey implements MIKEY RFC 3830 for SRTP key exchange. Pre-shared key mode transmitted the TEK Generation Key TGK in the clear. MikeyMessage::newpskinit built its KEMAC payload with EncAlg::Null and placed the TGK in encdata verbatim. Anyone able to read a PSK-Init message therefore recovers the...

OPENSUSE-SU-2026:22069-1 Security update for pacemaker

This update for pacemaker fixes the following issues: Security issue fixed: - CVE-2026-10649: denial of service via integer overflow in remote message decompression bsc1268381. Changes for pacemaker: Update to version 3.0.3+20260728.7052efa194: - cts: make cts-scheduler -o/--out-dir default to a...

SUSE-SU-2026:24251-1 Security update for pacemaker

This update for pacemaker fixes the following issues: Security issue fixed: - CVE-2026-10649: denial of service via integer overflow in remote message decompression bsc1268381. Changes for pacemaker: Update to version 3.0.3+20260728.7052efa194: - cts: make cts-scheduler -o/--out-dir default to a...