EUVD-2026-47916

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...

CVE-2026-65430

The Joomla Extension by regularlabs.com (GeoIP extension) is vulnerable to a credential leakage issue. The root cause is that MaxMind credentials are leaked through request URLs , potentially exposing sensitive information to unauthorized actors. Specific affected versions are not provided in the...

CVE-2026-65430 Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...

CVE-2026-65430

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...

CVE-2026-65430 Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...

CVE-2026-54291 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, airbyte-server-fips, dependency-track-apiserver, traccar-fips, ghidra, traccar, debezium, keycloak-fips, geoserver, airbyte-server, nacos-docker, guacamole-client, seata, hono, sonarqube, camunda-zeebe, flyway-fips, request-9047-keycloak-fips,...

GHSA-J92G-9F8W-J867 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, airbyte-server-fips, dependency-track-apiserver, traccar-fips, ghidra, traccar, debezium, keycloak-fips, geoserver, airbyte-server, nacos-docker, guacamole-client, seata, hono, sonarqube, camunda-zeebe, flyway-fips, request-9047-keycloak-fips,...

github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request

A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service DoS, making the BuildKit service unavailable...

PT-2026-64175

The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution RCE has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled...

ROS-20260723-73-0017

The vulnerability in Chromium is related to errors in HTTP requests processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Alibaba Cloud Linux 3 : 0212: cifs-utils (ALINUX3-SA-2026:0212)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0212 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-12505: A flaw was found in the cifs-utils...

CVE-2026-65430: Exposure of Sensitive Information to an Unauthorized Actor

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...

PT-2026-64133

SpiderTools redirect-target SSRF protection bypass Summary SpiderTools.scrape page validates the initial URL and rejects direct loopback, private, link-local, metadata, and internal hostnames. It then calls requests.Session.get without disabling automatic redirects or validating redirect Location...

CVE-2026-64874: Exposure of Sensitive Information to an Unauthorized Actor

Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs...

CVE-2026-49035: Heap-based Buffer Overflow

The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution RCE has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled...

PT-2026-63600

Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This could result in SSRF, internal-data access or writing attacker-controlled files into a web-accessible folder...

tomcat9 update

1:9.0.117-2 - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds 1:9.0.117-1 - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is...

PT-2026-64172

Name of the Vulnerable Software and Affected Versions MZ Automation libIEC61850 affected versions not specified Description The software is susceptible to a stack-based buffer overflow, a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to...

PT-2026-64185

Name of the Vulnerable Software and Affected Versions 9Router versions prior to 0.4.72 Description A server-side request forgery SSRF issue exists in the '/v1/web/fetch' endpoint. The endpoint accepts a user-controlled url parameter and passes it to an external scraping provider to fetch content...

CVE-2026-50039: Stack-based Buffer Overflow

The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a Read Request...