CLSA-2026-1789365574 TuxCare security update for werkzeug (1 CVE)

TuxCare rebuilt werkzeug to address 1 CVE. Fixed in 1.0.1.post5+tuxcare...

CLSA-2026-1789365078 TuxCare security update for cryptography (2 CVEs)

TuxCare rebuilt cryptography to address 2 CVEs. Fixed in 44.0.3.post4+tuxcare...

DEBIAN-CVE-2023-24288

An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service DoS via creating an excessive amount of save states...

DEBIAN-CVE-2023-24285

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed...

httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass

A vulnerability has been identified in the Apache HTTP Server. If the server is configured to connect to a malicious or compromised backend server, an attacker could exploit this flaw to bypass security controls or run unauthorized code on the system...

ImCurvin

ImCurvin' ImCurvin 是一款开源 Web 安全审计与渗透测试工具，作为概念验证（PoC）设计，用于自动化检测环境错误配置、追踪暴露的配置蓝图，并探测后端漏洞。 关于 ImCurvin 的详细信息，请访问 https://github.com/Skokoo/ImCurvin/blob/main/Mode.md 本项目完全在智能手机上使用 Termux 进行工程开发与调试。 截图。 您可以查看界面与流程的完整详解。请参阅截图画廊。 安装与使用方法 项目正在修复中，请暂时不要使用，我正在修复它 从 GitHub Releases 页面 下载并安装最新的 .deb 包：...

tomcat-coyote: tomcat: Improper Authorization allows security bypass

In Apache Tomcat, when multiple security constraints defined an HTTP method constraint for the same extension pattern, only the first method constraint was applied. A remote attacker could exploit this to bypass intended security restrictions for information or actions within the application...

Important: Red Hat Security Advisory: tomcat9 security update

An update for tomcat9 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

tomcat: Apache Tomcat: Security constraint bypass via improper URL encoding in rewrite valve

A flaw was found in Apache Tomcat. This vulnerability, located in the rewrite valve, is due to improper handling of URL encoding hex encoding. A remote attacker could exploit this to bypass security constraints in certain configurations, potentially gaining unauthorized access or performing actio...

Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix

A flaw was found in Apache Tomcat. This improper input validation vulnerability stems from an incomplete fix for a previous security issue CVE-2025-66614. This flaw may allow an attacker to bypass security controls or cause unexpected behavior within the application...

Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix

A flaw was found in Apache Tomcat. This improper input validation vulnerability stems from an incomplete fix for a previous security issue CVE-2025-66614. This flaw may allow an attacker to bypass security controls or cause unexpected behavior within the application...

tomcat-coyote: tomcat: Improper Authorization allows security bypass

In Apache Tomcat, when multiple security constraints defined an HTTP method constraint for the same extension pattern, only the first method constraint was applied. A remote attacker could exploit this to bypass intended security restrictions for information or actions within the application...

CVE-2026-90699

creationtimestamp| type| source ---|---|--- 2026-09-14 05:03:21+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117267640180714498 2026-09-14 09:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvhqokpvdh2j 2026-09-14 10:21:16+00:00| seen|...

CVE-2026-90682

A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAGGPSLAT/TAGGPSLONG leads to heap-based buffer overflow. An attack has to be...

Important: Red Hat Security Advisory: grafana-pcp security update

An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Important: Red Hat Security Advisory: delve security update

An update for delve is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-38924

In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a...

CVE-2026-22706

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:15+00:00| seen| Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4 2026-09-15 00:00:21+00:00| published-proof-of-concept| Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4...

CVE-2026-14962

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:13+00:00| seen| Telegram/cfwIjD0BfTttpxj-RZnmg61xri6aKpaW-Ttu0tih2neg1Gg 2026-09-14 03:00:13+00:00| seen| Telegram/SISeOiJWiDHPKa0-EGjfIE-tIZnqvMDmbIqcTRDP3O63UA 2026-09-15 00:00:22+00:00| published-proof-of-concept|...

CVE-2017-0541

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:12+00:00| seen| Telegram/EPpfD-gVy8aS6WjPAMTAUlj2EpWx-6D3lqr7cSnTTsweZ3U 2026-09-15 00:00:23+00:00| published-proof-of-concept| Telegram/EPpfD-gVy8aS6WjPAMTAUlj2EpWx-6D3lqr7cSnTTsweZ3U...