91430 matches found
Security Updates for Microsoft Dynamics 365 (on-premises) (August 2026)
The Microsoft Dynamics 365 on-premises is missing security updates. It is,therefore, affected by the following vulnerabilities: - Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network. CVE-2026-65815 - Exposure of...
Linux Distros Unpatched Vulnerability : CVE-2026-67986
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - amazing-print/amazingprint at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArraygrep. A specially...
wp-forge
wp-forge wp-forge scans WordPress.org plugins for serious PHP...
dalfox v3.2.1
Looking for the Go v2.x version? Dalfox v3 is a complete rewrite in Rust. The Go codebase is preserved on the v2 branch and continues to receive security backports. See SECURITY.md for the support policy. Dalfox is a powerful open-source tool that focuses on automation, making it ideal for quickl...
Malicious Package
Overview @intentsolution/database-security-scanner is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
brakeman v8.0.6
Brakeman Brakeman is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Installation Using RubyGems: root@kitploit: gem install brakeman Using Bundler: root@kitploit: group :development do gem 'brakeman', require: false end Using Docker: root@kitploit:...
CVE-2026-58435: Incorrect Privilege Assignment
Gitea LFS Deploy-Key Privilege Escalation...
Linux Distros Unpatched Vulnerability : CVE-2026-14681
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pghba.conf rules, via initial direct TLS...
CVE-2026-28186: Missing Authorization
Subscriber Broken Access Control in Travelfic Toolkit = 1.5.1 versions...
CVE-2026-18164: Use of Hard-coded Credentials
An undocumented hard-coded credential, shared by all device units, is authorized to bypass authentication. This allows an attacker within Bluetooth range to arbitrarily manipulate brain stimulation parameters and state...
CVE-2026-17229: Loop with Unreachable Exit Condition
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop...
CVE-2026-57894: Server-Side Request Forgery (SSRF)
Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration...
CVE-2026-58437: Improper Access Control
Repository Visibility Manipulation via Git Push Options...
CVE-2026-73403: Missing Authorization
Unauthenticated Broken Access Control in User Registration = 5.2.6 versions...
CVE-2026-13365: Cross-Site Request Forgery (CSRF)
IBM Planning Analytics 2.0, and 2.1 Local is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...
CVE-2026-17078: Uncontrolled Resource Consumption
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to resource exhaustion...
CVE-2026-58440: Improper Access Control
Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content incomplete revocation cleanup in DeleteCollaboration...
CVE-2026-58431: Incorrect Authorization
Public-only API token restriction is not enforced on team API routes...