[SECURITY] Fedora 42 Update: polkit-126-3.fc42.2

polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: dask-gateway, gitaly, argo-cd, kubernetes-dashboard, cilium, redka, runc, aactl, newrelic-fluent-bit-output, aws-flb-kinesis, istio, zot, fscrypt, gitlab-pages, karpenter, libnvidia-container, falco-no-driver, mattermost, gitlab-kas, kyverno, cert-manager,...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: azurefile-csi-fips, tigera-operator, docker-cli-fips, kube-state-metrics, traefik-fips, k8s-device-plugin, commercial-chainloop-cli, buildkite-agent, elastic-agent-fips, aws-flb-kinesis, gatekeeper, hubble, knative-eventing-fips, loki, spire-server, zitadel,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: azurefile-csi-fips, tigera-operator, docker-cli-fips, kube-state-metrics, traefik-fips, k8s-device-plugin, commercial-chainloop-cli, buildkite-agent, elastic-agent-fips, aws-flb-kinesis, gatekeeper, hubble, knative-eventing-fips, loki, spire-server, zitadel,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: scuttle-fips, yace, sigstore-scaffolding-fips, kubernetes-dashboard-metrics-scraper, neuvector-dbgen-fips, ytt, kubevirt-cdi-operator, apko-fips, aws-otel-collector-fips, kubernetes-release-fips, prometheus-nats-exporter-fips, argo-workflows-fips, trillian, crossplan...

CVE-2026-34424 Smart Slider 3 Pro 3.5.1.35 Supply Chain Attack Remote Access Toolkit

Smart Slider 3 Pro version 3.5.1.35 for WordPress and Joomla contains a multi-stage remote access toolkit injected through a compromised update system that allows unauthenticated attackers to execute arbitrary code and commands. Attackers can trigger pre-authentication remote shell execution via...

RansomTrack: A Hybrid Behavioral Analysis Framework for Ransomware Detection

Ransomware poses a serious and fast-acting threat to critical systems, often encrypting files within seconds of execution. Research indicates that ransomware is the most reported cybercrime in terms of financial damage, highlighting the urgent need for early-stage detection before encryption is...

OpenSSL Toolkit 3.6.2

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 3.6 release...

OpenSSL Toolkit 3.3.7

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 3.3 release...

OpenSSL Toolkit 3.0.20

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 3.0 LTS release...

Juniper Junos OS Vulnerability (JSA103159)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA103159 advisory. - A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the advanced forwarding toolkit evo-aftmand/evo-pfemand of Juniper Networks Junos ...

OpenSSL Toolkit 3.5.6

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 3.5 LTS release...

OpenSSL Toolkit 3.4.5

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 3.4 release...

Linux Distros Unpatched Vulnerability : CVE-2026-33540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, in pull- through cache mode, distribution discovers token auth...

MAL-2026-2509 Malicious code in @langgraphjs/toolkit (npm)

Package collects and sends sensitive system info to a hardcoded server. The package masquerades as a LangGraph JS utility but contains a malicious postinstall script. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector...

WordPress Kadence Blocks - Page Builder Toolkit for Gutenberg Editor plugin <= 3.6.3 - Missing Authorization to Authenticated (Contributor+) Media Upload vulnerability

WordPress Kadence Blocks - Page Builder Toolkit for Gutenberg Editor plugin = 3.6.3 - Missing Authorization to Authenticated Contributor+ Media Upload vulnerability discovered by lucsob in WordPress Plugin Gutenberg Blocks by Kadence Blocks versions = 3.6.3...

DEBIAN-CVE-2026-35172

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distribution can restore read access in repo a after an explicit delete when storage.cache.blobdescriptor: redis and storage.delete.enabled: true are both enabled. The delete path clears the shared dige...

UBUNTU-CVE-2026-35172

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distribution can restore read access in repo a after an explicit delete when storage.cache.blobdescriptor: redis and storage.delete.enabled: true are both enabled. The delete path clears the shared dige...

Updated python-nltk packages fix security vulnerability

nltk Vulnerable to Cross-site Scripting. CVE-2026-33230...

EUVD-2026-19243

A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This impacts the function executeOnReception/executeOnEndOfStudy of the file dcmnet/apps/storescp.cc of the component storescp. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible...