[SECURITY] Fedora 44 Update: nginx-mod-js-challenge-0^20230517.gitda6852d-11.fc44

Simple JavaScript proof-of-work based access for Nginx with virtually no over head...

PT-2026-64136

The MCP SSE server started via ToolsMCPServer.run sse / launch tools mcp servertransport="sse" binds to 0.0.0.0 by default and builds its Starlette application with no authentication middleware and no Origin-header validation. The module mcp/mcp security.py provides exactly the needed controls...

The vulnerability of the bpf_trampoline_update() function in the kernel/bpf/trampoline.c module, which supports the BPF interpreter for Linux kernels, allows a hacker to trigger a service failure.

The vulnerability of the bpftrampolineupdate function in the kernel/bpf/trampoline.c module, which is part of the Linux operating system’s BPF interpreter support, relates to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to trigger a...

The vulnerability of the Cassandra export module in the Glances monitoring tool’s application programming interface allows a perpetrator to execute arbitrary code.

The vulnerability of the Cassandra export module in the Glances monitoring tool’s application programming interface is related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code...

PT-2026-71338

Name of the Vulnerable Software and Affected Versions rsyslogd affected versions not specified Description An unauthenticated remote peer can cause rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can result in an invalid...

kernel security update

6.12.0-211.38.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Fedora 44 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-60fc198d3b)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-60fc198d3b advisory. nginx-mod-fancyindex: - Rebuild for 1.30.4 nginx-mod-modsecurity: - Rebuild for 1.30.4 nginx-mod-naxsi: - Rebuild for 1.30.4 nginx-mod-headers-more:...

The vulnerability of the am33xx_pm_probe() function in the drivers/soc/ti/pm33xx.c file of the Linux operating system’s kernel driver module allows a hacker to cause a system failure.

The vulnerability of the am33xxpmprobe function in the drivers/soc/ti/pm33xx.c file of the Linux operating system’s kernel module is related to errors during link generation. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the __smc_create() function in the net/smc/af_smc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smccreate function in the net/smc/afsmc.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the calc_lcoefs() function in the block/blk-iocost.c module of the Linux kernel’s block-level support mechanism allows a attacker to cause a service failure.

The vulnerability of the calclcoefs function in the block/blk-iocost.c module of the Linux kernel’s block-level support mechanism is related to insufficient checking of input data when dividing by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-63614

The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens...

PT-2026-64193

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.186 Description An out-of-bounds write occurs in the Codecs component, which could allow a remote attacker to perform a sandbox escape by using a specially crafted HTML page. A sandbox escape is a...

The vulnerability of the generic_hwtstamp_ioctl_lower() function in the net/core/dev_ioctl.c module, which supports network functions of the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the generichwtstampioctllower function in the net/core/devioctl.c module, which supports network functions in the Linux kernel, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the io_wq_create() function in the io_uring module of the io-wq.c interface, a synchronous input/output interface for the Linux operating system’s kernel, allows a hacker to cause a service failure.

The vulnerability of the iowqcreate function in the iouring module of the Linux kernel’s asynchronous input/output interface relates to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-30669)

Chrome is a web browser developed by Google. Google Chrome has a security vulnerability, which stems from a memory leak present in the Cast module. Attackers can exploit this vulnerability to execute arbitrary code within the sandbox through carefully crafted HTML pages...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-30674)

Chrome is a web browser developed by Google. Google Chrome has a security vulnerability, which stems from a flaw in the GPU module that allows for reuse after release. Attackers can exploit this vulnerability to bypass sandbox protections through specially crafted HTML pages...

GHSA-9CMH-XCQM-5HQR n8n: Cross-Tenant Module-Cache Poisoning in the JS Task Runner

Impact n8n's JavaScript task runner shared one module cache across all users' Code-node executions, so a user able to run a Code node could poison a cached module and alter other users' Code-node executions on the same runner, affecting their confidentiality, integrity, or availability. This is a...

CVE-2026-64795

Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’...

CVE-2026-64795 Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions

Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’...

CVE-2026-64795 Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions

Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’...