EUVD-2026-92293

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

Malicious code in bitcoin-rpc-lite (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in eth-keystore-utils (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in rate-limit-mini (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in req-throttle-mini (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17568 Malicious code in req-throttle-mini (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Cisco ASA Uncontrolled Resource Consumption (CVE-2020-3554)

A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a memory...

kernel security, bug fix, and enhancement update

6.12.0-211.60.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Cisco ASA Improper Input Validation (CVE-2019-1687)

A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to restart unexpectedly, resulting in a denial of service DoS condition. The...

Cisco ASA Uncontrolled Resource Consumption (CVE-2018-15399)

A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to exhaust the 1550-byte buffers on an affected device, resulting in a denial of service DoS condition. The...

Cisco ASA Improper Input Validation (CVE-2019-1694)

A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability i...

Oracle Linux 10 : kernel (ELSA-2026-71602)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71602 advisory. - pppoe: reload header pointer after devhardheader Guillaume Nault RHEL-242509 CVE-2026-68121 - nvme-tcp: fix host memory disclosure on R2T for a rea...

Oracle Linux 8 : kernel (ELSA-2026-70402)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70402 advisory. - pppoe: reload header pointer after devhardheader Guillaume Nault RHEL-237293 CVE-2026-68121 - nvme-tcp: reject a read that transferred too few bytes...

Oracle Linux 10 : kernel (ELSA-2026-72624)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72624 advisory. - perf: Reject exited events as group leaders Anubhav Shelat RHEL-258812 CVE-2026-74753 - perf/core: Detach event groups during removeonexec Anubhav...

higernes

higernes Python으로 작성된 수동적 OSINT 툴킷. API 키도, 계정도, 어디에도 로깅도 없다. 핸들, 이메일, 도메인, IP, 전화번호 또는 해시를 지정하면 이미 공개된 정보를 파헤친다. 무엇을 하는가 6개의 모듈, 모두 공개 엔드포인트를 읽는다: 모듈| 얻을 수 있는 것 ---|--- username| 핸들을 약 700개 사이트WhatsMyName 데이터셋에 걸쳐 훑으며, 적중이 들어오는 대로 실시간 갱신 email| 구문, MX, 일회용 여부 검사, gravatar, 그다음 @ 앞부분을 username으로 ...

CVE-2026-105105 Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

CVE-2026-105105 Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

CVE-2026-105105 Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

EUVD-2026-91136

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2026-103764

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...