14402 matches found
Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.95 bug fix and security update
Red Hat OpenShift Container Platform release 4.12.95 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Description WordPress does not exclude internal notes from the public comment feeds, allowing unauthenticated users to read their content...
MAL-2026-13227 Malicious code in bigops-notes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b318f6ad8ba92430c504fd94111609cc003a62f8bce36e3c1f41308b195dae On require of bigops-notes, bootstrap.js selects a platform-specific asset, downloads an opaque binary from one of four runtime-assembled .workers.de...
CVE-2026-71242
Crater's NotePolicy checks only a blanket Bouncer ability manage-all-notes / view-all-notes with no company-ownership comparison, unlike InvoicePolicy and other sibling policies which additionally verify -hasCompany-companyid. Any authenticated user of one company can read, edit, or delete anothe...
CVE-2026-71242
Crater vulnerability CVE-2026-71242 exposes cross-company IDOR in notes. The NotePolicy uses a blanket manage/view notes check without company ownership verification, unlike other policies that call hasCompany(model->company_id). NotesController actions (show, update, destroy) authorize withou...
EUVD-2026-53315
Crater's NotePolicy checks only a blanket Bouncer ability manage-all-notes / view-all-notes with no company-ownership comparison, unlike InvoicePolicy and other sibling policies which additionally verify $user-hasCompany$model-companyid. NotesController's show, update, and destroy actions authori...
CVE-2026-71242
Crater's NotePolicy checks only a blanket Bouncer ability manage-all-notes / view-all-notes with no company-ownership comparison, unlike InvoicePolicy and other sibling policies which additionally verify $user-hasCompany$model-companyid. NotesController's show, update, and destroy actions authori...
CVE-2026-71242 Crater - Cross-Company IDOR on Notes via Missing Company-Ownership Check in NotePolicy
Crater's NotePolicy checks only a blanket Bouncer ability manage-all-notes / view-all-notes with no company-ownership comparison, unlike InvoicePolicy and other sibling policies which additionally verify -hasCompany-companyid. Any authenticated user of one company can read, edit, or delete anothe...
CVE-2026-71242 Crater - Cross-Company IDOR on Notes via Missing Company-Ownership Check in NotePolicy
Crater's NotePolicy checks only a blanket Bouncer ability manage-all-notes / view-all-notes with no company-ownership comparison, unlike InvoicePolicy and other sibling policies which additionally verify -hasCompany-companyid. Any authenticated user of one company can read, edit, or delete anothe...
CVE-2026-71242 Crater - Cross-Company IDOR on Notes via Missing Company-Ownership Check in NotePolicy
Crater's NotePolicy checks only a blanket Bouncer ability manage-all-notes / view-all-notes with no company-ownership comparison, unlike InvoicePolicy and other sibling policies which additionally verify -hasCompany-companyid. Any authenticated user of one company can read, edit, or delete anothe...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.19.41 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update
An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update
An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.21.27 bug fix and security update
Red Hat OpenShift Container Platform release 4.21.27 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...
CLSA-2026-1779324479 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 2 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.2...
CVE-2024-33111
creationtimestamp| type| source ---|---|--- 2026-08-04 13:00:17+00:00| seen| https://t.me/pentestnotes/50 2026-08-05 00:00:32+00:00| seen| https://t.me/pentestnotes/50 2026-08-06 00:01:01+00:00| published-proof-of-concept| https://t.me/pentestnotes/50...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.20.32 bug fix and security update
Red Hat OpenShift Container Platform release 4.20.32 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.22.8 bug fix and security update
Red Hat OpenShift Container Platform release 4.22.8 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...
installer v13.32.1
Overview Installation mql cnspec Scan your target platform Package Information Kubernetes Status Docker Containers: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: Installation The easiest way to install mql & cnspec is to use the install scripts. via Shell Script Linux and macOS...
Important: kernel-livepatch-6.18.33-63.124
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...