ROOT-APP-PYPI-CVE-2026-69249 CVE-2026-69249 in cryptography - Patched by Root

Root has patched CVE-2026-69249 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-34073 CVE-2026-34073 in cryptography - Patched by Root

Root has patched CVE-2026-34073 in the cryptography package for Root:PyPI. Multiple fixed versions available...

Zoho ManageEngine - Remote Code Execution

Zoho ManageEngine Password Manager Pro, PAM 360, and Access Manager Plus are susceptible to unauthenticated remote code execution via XML-RPC. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary...

Oracle WebLogic Server Administration Console - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services versions 0.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0 contain an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. id:...

SSLPatch

SSL Patch CVE-2014-1266 Copyright c 2014 Linus Yang Introduction CVE-2014-1266 , également connue sous le nom de « goto fail exploitation de la vérification SSL », est une faille SSL/TLS très grave sur iOS et OS X. Apple a publié iOS 6.1.6 et 7.0.6 pour corriger ce problème, mais a ignoré certain...

[SECURITY] Fedora 45 Update: ocaml-patch-3.1.2-3.fc45

The patch module lets you apply your unified diffs in pure OCaml. The loosely specified diff file format is widely used for transmitting differences of line-based information. The motivating example is opam, which is able to validate updates being cryptographically signed by providing a unified...

PT-2026-106361

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints...

SUSE SLES12 Security Update : kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:4436-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4436-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.272 fixes various security issues: The following security issues were fixed: -...

openvz-cve-patch-2026

GhostLock - openVZ 7 के लिए CVE-2026-43499 बैकपोर्ट पैच openVZ 7 कर्नेल vzkernel-3.10.0-1160.129.1.ovz7.226.2 के लिए CVE-2026-43499 बैकपोर्ट पैच चूँकि OpenVZ टीम ने OpenVZ कर्नेल के लिए पैच अभी तक तैनात नहीं किया है, Claude की मदद से मैंने यह पैच बनाया है और यह काम करता हुआ प्रतीत होता है! मैंने...

CVE-2016-1734

पैच AppleUSBNetworking.kext में नहीं है जैसा कि सुरक्षा सलाहकार ने सुझाव दिया था https://support.apple.com/en-ca/HT206166. /CVE-2016-1734 md5sum ./10.11.1/AppleUSBNetworking.kext/Contents/MacOS/AppleUSBNetworking.c ./10.11.5/AppleUSBNetworking.kext/Contents/MacOS/AppleUSBNetworking.c...

CVE-2023-43208

CVE-2023-43208 — ثغرة RCE قبل المصادقة في Mirth Connect تنفيذ كود عن بعد بدون مصادقة في NextGen Healthcare Mirth Connect CVSS 9.8 حرجة — تجاوز التصحيح لـ CVE-2023-37679 نظرة عامة يستخدم Mirth Connect مكتبة Java XStream لإلغاء تسلسل حمولات XML على نقطة النهاية /api/users بدون مصادقة. قدم الإصلاح...

CVE-2022-30190-NSIS

MSDT Patcher، المعروف أيضًا باسم CVE-2022-30190-NSIS هذا سكربت NSIS يساعد على نشر والتراجع عن تصحيح التسجيل للتخفيف من CVE-2022-30190 كما أوصت به Microsoft. نزّل الملف التنفيذي من هنا. كيف يعمل؟ عند تشغيله، يتحقق من وجود المفتاح HKCR\ms-msdt. إذا كان المفتاح موجودًا، يفترض أن الجهاز معرّض للخطر...

CVE-2018-10732

CVE-2018-10732 Exploit-DB प्रकाशन: कोई खुलासा नहीं! Dataiku विक्रेता पैच और क्रेडिट: https://doc.dataiku.com/dss/latest/releasenotes/4.2.htmlsecurity लेखक Alex Hernandez उर्फ @alt3kx...

CVE-2026-105633

Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issueid in the URL but omits it from the database query. A project member can use an issueid they control in the URL while targeting another user's attachment by its pk UUID. Because th...

CVE-2026-105633 Plane: Issue Attachment Ownership Hijacking via Missing `issue_id` Scope

Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issueid in the URL but omits it from the database query. A project member can use an issueid they control in the URL while targeting another user's attachment by its pk UUID. Because th...

EUVD-2026-92547

Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issueid in the URL but omits it from the database query. A project member can use an issueid they control in the URL while targeting another user's attachment by its pk UUID. Because th...

CVE-2026-105633 Plane: Issue Attachment Ownership Hijacking via Missing `issue_id` Scope

Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issueid in the URL but omits it from the database query. A project member can use an issueid they control in the URL while targeting another user's attachment by its pk UUID. Because th...

CVE-2026-105633 Plane: Issue Attachment Ownership Hijacking via Missing `issue_id` Scope

Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issueid in the URL but omits it from the database query. A project member can use an issueid they control in the URL while targeting another user's attachment by its pk UUID. Because th...

CVE-2026-105633

The open-source project management tool Plane is vulnerable to an authorization bypass in the V2 issue-attachment PATCH endpoint prior to version 1.4.0 . The root cause is that the server accepts an issue_id in the URL but fails to include it in the database query, matching only on pk, workspace,...

CVE-2026-104966

Plane is an open-source project management tool. Prior to 1.4.0, two endpoint families fail to verify that nested resource identifiers belong to the workspace and project named in the URL. An authenticated user can read or modify estimates from another workspace through PATCH...