GHSA-2956-977X-2W3R Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)

Summary image.download fetches a URL and writes the response to disk. It does not use the central path guard validatepathwithenvconfig, which confines writes to FLYTOSANDBOXDIR; instead it confines the output to outputdir, but outputdir is itself a caller parameter. Since the attacker sets both t...

Metasploit Framework 6.5 Released

Today we’re proud to announce that Metasploit Framework version 6.5 has been released. Over the past two years, with the help of countless contributors, we’ve added 422 new modules along with a whole slew of new features. Malleable C2 Profiles for HTTP One of the latest and most requested feature...

CVE-2026-56428

The SSH service on BSH ELP Electronic Platform modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorizedkeys file for the root user. An attacker in possession of the...

JetBrains GoLand < 2026.2 Multiple Vulnerabilities

The version of JetBrains GoLand installed on the remote host is prior to 2026.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration CVE-2026-64802 - In...

PT-2026-66439

A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion. This vulnerability affects Node.js 24.x and 22.x...

PT-2026-66440

CVE-2026-56846, CVE-2026-56848 & CVE-2026-58043 and other: 3 high-severity and 8 medium or low vulnerabilities in Node.js ‍🔥 Recently disclosed vulnerabilities in Node.js touch HTTP/2, the Permission Model, and several core modules. Search at Netlas.io: 👉 Link: https://nt.ls/AAg1f 👉 Dork:...

CVE-2026-67424

Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, the HTTP modules http.get, http.request, and http.batch in src/core/modules/atomic/http/get.py, src/core/modules/atomic/http/request.py, and src/core/modules/atomic/http/batch.py validate only the initial...

CVE-2026-67428 Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)

Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, HTTP-emitting modules including src/core/modules/thirdparty/developer/http/requests.py, core.api.httpget, core.api.httppost, graphql.query, graphql.mutation, monitor.httpcheck, communication.slacksend,...

CVE-2026-67424 Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidation

Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, the HTTP modules http.get, http.request, and http.batch in src/core/modules/atomic/http/get.py, src/core/modules/atomic/http/request.py, and src/core/modules/atomic/http/batch.py validate only the initial...

CVE-2026-64352

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When certain security modules interact with network routing tables, it can trigger diagnostic warnings. This issue primarily affects debug kernels by generating console messages and does not lead to direct security...

PT-2026-65895

Name of the Vulnerable Software and Affected Versions Flyto2 Core versions prior to 2.26.7 Description HTTP-emitting modules fetch caller-controlled URLs without using the validate url with env config function, which allows Server-Side Request Forgery SSRF to internal or metadata endpoints. SSRF ...

CVE-2026-62426

A flaw was found in Xen. The system's sysctl operations utilize a global lock that lacks fairness in its acquisition mechanism. Additionally, when Xen Security Modules XSM with Flask are active, this lock can be acquired before proper permission checks are performed. This vulnerability could allo...

CVE-2026-54890

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

SUSE CVE-2026-52863

In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' modules work together, creates a shallow copy of the view name in effect that could lead to memory corruption if the owner of the original view name is jostled out when Unbound is under pressure...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nginx: nginx-1.30.4-2.hum1 aarch64, x8664 nginx-all-modules-1.30.4-2.hum1 noarch nginx-core-1.30.4-2.hum1 aarch64, x8664 nginx-filesystem-1.30.4-2.hum1 noarch nginx-mod-devel-1.30.4-2.hum1 aarch6...

[SECURITY] Fedora 43 Update: p11-kit-0.26.4-1.fc43

p11-kit provides a way to load and enumerate PKCS11 modules, as well as a standard configuration setup for installing PKCS11 modules in such a way that they're discoverable...

[SECURITY] Fedora 43 Update: pam-1.7.1-5.fc43

PAM Pluggable Authentication Modules is a system security tool that allows system administrators to set authentication policy without having to recompile programs that handle authentication...

Linux Distros Unpatched Vulnerability : CVE-2026-64414

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: handle unreadable frags sashiko reports: When an skb with unreadable fragments such as from devmem TCP, where skbfragsreadableskb returns false is...

GO-2026-5463 Bettercap has an integer coercion error in modules/mysql_server/mysql_server.go in github.com/bettercap/bettercap

Bettercap has an integer coercion error in modules/mysqlserver/mysqlserver.go in github.com/bettercap/bettercap...

USN-8601-1: PAM vulnerability

It was discovered that PAM had a timing discrepancy in the pamuserdb module when comparing plaintext passwords. An attacker could possibly use this issue to obtain sensitive information by measuring response-timing differences during repeated authentication attempts...