org.keycloak:keycloak-dependencies-server-all (8.0.2), org.keycloak:keycloak-saml-adapter-api-public (8.0.2) +23 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (8.0.2)

org.keycloak:keycloak-saml-core MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 8.0.2 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-dependencies-server-all (9.0.0), org.keycloak:keycloak-saml-adapter-api-public (9.0.0) +23 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (9.0.0)

org.keycloak:keycloak-saml-core MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 9.0.0 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-dependencies-server-all (9.0.2), org.keycloak:keycloak-saml-adapter-api-public (9.0.2) +23 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (9.0.2)

org.keycloak:keycloak-saml-core MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 9.0.2 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-dependencies-server-all (9.0.3), org.keycloak:keycloak-saml-adapter-api-public (9.0.3) +23 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (9.0.3)

org.keycloak:keycloak-saml-core MAVEN version 9.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 9.0.3 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-dependencies-server-all (10.0.0), org.keycloak:keycloak-saml-adapter-api-public (10.0.0) +23 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (10.0.0)

org.keycloak:keycloak-saml-core MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.0 -...

org.keycloak:keycloak-dependencies-server-all (11.0.0), org.keycloak:keycloak-saml-adapter-api-public (11.0.0) +24 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (11.0.0)

org.keycloak:keycloak-saml-core MAVEN version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.0 -...

owasp-web-pentest-tools

OWASP Web Pentest Tools CLI toolkit para suporte em testes de...

CVE-2026-33565

Summary: CVE-2026-33565 concerns the kernel_linux_common_modules component with a race condition that enables a local attacker to cause a denial of service in OpenHarmony v6.0 and earlier. The available connected documents confirm the vulnerable component and the local DOS impact, with a CVSS 3.1...

CVE-2026-33565 kernel_linux_common_modules has a Race Condition vulnerability

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS...

zparty

Zparty Automated web penetration testing framework with loc...

ALSA-2026:19175 Important: python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RHEL 9 : python3.11 (RHSA-2026:19175)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:19175 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

Samsung Walrus code issue vulnerabilities

SAMSUNG Walrus is a WebAssembly runtime engine developed by South Korean company Samsung. There is a code vulnerability in SAMSUNG Walrus, which stems from null pointer dereferencing. This vulnerability could allow attackers to exploit it by using specially crafted WebAssembly modules that contai...

Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Important: python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Exploit for Out-of-bounds Write in Linux Linux_Kernel

CVE-2026-43500 / CVE-2026-43284 / Dirty Frag mitigation rxrpc...

MGASA-2026-0149 Updated perl-WWW-Mechanize-Cached, perl-File-XDG & perl-Path-Tiny packages fix security vulnerabilities

WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution...

Security Bulletin: Relative Path Traversal, Improper Isolation or Compartmentalization vulnerability in erlang otp

Summary Relative Path Traversal, Improper Isolation or Compartmentalization vulnerability in erlang otp erlang/otp tftpfile modules, erlang otp inets tftpfile modules, erlang otp tftp tftpfile modules allows Relative Path Traversal. This vulnerability is associated with program files...

CVE-2026-39079: Exposure of Sensitive Information to an Unauthorized Actor

An issue in prestashop upsshipping all versions through at least 2.4.0 allows a remote attacker to obtain sensitive information via the /modules/upsshipping/logs/, and /modules/upsshipping/lib/UPSBaseApi.php components...

Remote Code Execution (RCE)

Yoke is vulnerable to Remote Code Execution RCE. The vulnerability is due to insufficient validation of the overrides.yoke.cd/flight annotation in the Air Traffic Controller ATC component, where attacker-controlled URLs are used to download and execute arbitrary WASM modules. This allows users wi...