117782 matches found
[SECURITY] Fedora 44 Update: chromium-149.0.7827.53-1.fc44
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 44 Update: haveged-1.9.22-1.fc44
A Linux entropy source using the HAVEGE algorithm Haveged is a user space entropy daemon which is not dependent upon the standard mechanisms for harvesting randomness for the system entropy pool. This is important in systems with high entropy needs or limited user interaction e.g. headless server...
CVE-2026-11464
creationtimestamp| type| source ---|---|--- 2026-06-08 01:21:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqjemn5z62i...
CVE-2026-11467
creationtimestamp| type| source ---|---|--- 2026-06-08 01:16:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqj3o6h2f2i...
CVE-2026-11468
creationtimestamp| type| source ---|---|--- 2026-06-08 01:11:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqisppkvv2d...
CVE-2026-11466
creationtimestamp| type| source ---|---|--- 2026-06-08 01:06:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqijr7ejc26...
CVE-2026-11462
creationtimestamp| type| source ---|---|--- 2026-06-08 01:01:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqiasnxag27 2026-06-08 02:55:00+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnqolijknr2b...
CVE-2026-11469
creationtimestamp| type| source ---|---|--- 2026-06-08 00:56:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqhxu5wkz2y...
CVE-2026-11463
creationtimestamp| type| source ---|---|--- 2026-06-08 00:52:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqhq6jxpo27 2026-06-08 02:56:24+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnqoneaqej2l...
Snipe-IT 安全漏洞
Snipe-IT is a set of open-source IT asset/license management systems developed by Grokability. Versions of Snipe-IT prior to 8.6.0 contained security vulnerabilities. These vulnerabilities stemmed from the ability for non-administrator users to have the "users.edit" permission, allowing them to...
HTML Sanitizer 跨站脚本漏洞
HTML Sanitizer is an HTML security filtering component open-sourced by the TYPO3 GitHub Department. Versions of HTML Sanitizer prior to 2.3.2 contained a cross-site scripting vulnerability. This vulnerability stemmed from incorrect encoding of namespace attributes during HTML serialization, which...
Flowise 访问控制错误漏洞
Flowise is an open-source tool developed by FlowiseAI, designed for easily building LLM applications. Versions of Flowise prior to 3.1.2 contained a access control vulnerability. This vulnerability stemmed from a lack of server-side verification and authorization checks at the variable update...
SourceCodester Barangay Resident Profiling and Information Management System 信任管理问题漏洞
The SourceCodester Barangay Resident Profiling and Information Management System is an open-source system developed by SourceCodester for managing profiles and information of Barangay residents. Version 1.0 of the SourceCodester Barangay Resident Profiling and Information Management System contai...
PT-2026-47609
Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.135.Final Netty versions prior to 4.2.15.Final Description The DNS resolver in the io.netty.resolver.dns module uses a predictable Pseudo-Random Number Generator PRNG for generating DNS transaction IDs and defaults ...
Flowise 安全漏洞
Flowise is an open-source tool developed by FlowiseAI, designed for easily building LLM applications. Versions of Flowise prior to 3.1.2 contained security vulnerabilities. These vulnerabilities stemmed from issues with batch assignment during evaluation and creation processes, which could lead t...
PT-2026-47342
OpenBullet2 through version 0.3.2 contains a remote code execution vulnerability that allows authenticated users to execute arbitrary commands by uploading script files .bat.ps1.sh through the FileProxySource proxy loading feature. Attackers can upload malicious script files as proxy sources,...
cve-2026-41720 - HIGH - Authentication Bypass with Empty Password in Spring LDAP
cve-2026-41720 - HIGH - Authentication Bypass with Empty Password in Spring LDAP...
PT-2026-47589
Summary Netty's DNS resolver uses a predictable PRNG for generating DNS transaction IDs and defaults to a static UDP source port. This combination reduces the entropy of DNS queries, enabling DNS Cache Poisoning Kaminsky attack. Details Two factors contribute to this vulnerability in...
