com.custardsource.parfait:parfait-cxf (>=0.2.0, <=0.3.10), com.github.krasa:krasa-jaxb-tools (1.8) +514 more potentially affected by CVE-2026-42402 via org.apache.neethi:neethi (2.0.4)

org.apache.neethi:neethi MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.neethi:neethi and may be impacted: - com.custardsource.parfait:parfait-cxf =0.2.0, =0.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =4.0.3, =1.0,...

[SECURITY] Fedora 44 Update: vhs-0.11.0-2.fc44

Write terminal GIFs as code for integration testing and demoing your CLI tool s...

CVE-2026-7445

A security vulnerability has been detected in ZachHandley ZMCPTools up to 0.2.2. Affected by this issue is some unknown functionality of the file src/managers/ResourceManager.ts of the component MCP Log Resource Handler. The manipulation of the argument dirname leads to path traversal. Remote...

HashiCorp Consul Configuration Tool Unauthorized Access

The vulnerability of the HashiCorp Consul Community Edition and Consul Enterprise service configuration tools is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access t...

Oracle Linux 10 : libtiff (ELSA-2026-12265)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-12265 advisory. 4.6.0-6.3 - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile RHEL-159309 Tenable has extracted the preceding description block directly...

EUVD-2026-26301

A security vulnerability has been detected in ZachHandley ZMCPTools up to 0.2.2. Affected by this issue is some unknown functionality of the file src/managers/ResourceManager.ts of the component MCP Log Resource Handler. The manipulation of the argument dirname leads to path traversal. Remote...

CVE-2026-7397

The CVE affects NousResearch hermes-agent v0.8.0, specifically the _check_sensitive_path logic in tools/file_tools.py, enabling symlink following when exploited locally. Details from connected records indicate the issue arises from path handling that can be manipulated by an attacker with local a...

net.jawr.extensions:jawr-spring-extension (3.6), net.jawr.tools:jawr-ant (1.6) +11 more potentially affected by CVE-2026-22745 via org.springframework:spring-webmvc (2.0.8)

org.springframework:spring-webmvc MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.jawr.extensions:jawr-spring-extension 3.6 - net.jawr.tools:jawr-ant 1.6 -...

net.jawr.extensions:jawr-spring-extension (3.6), net.jawr.tools:jawr-ant (1.6) +11 more potentially affected by CVE-2026-22741 via org.springframework:spring-webmvc (2.0.8)

org.springframework:spring-webmvc MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.jawr.extensions:jawr-spring-extension 3.6 - net.jawr.tools:jawr-ant 1.6 -...

Top AI-Powered Vendor Risk Management Platforms for SaaS Companies in 2026

Top AI-powered vendor risk platforms for SaaS companies in 2026, compare tools, features, and how to choose the…...

PT-2026-35969

A security flaw has been discovered in NousResearch hermes-agent 0.8.0. This affects the function check sensitive path of the file tools/file tools.py. The manipulation results in symlink following. Attacking locally is a requirement. The exploit has been released to the public and may be used fo...

CVE-2018-25310: Cross-Site Request Forgery (CSRF)

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting a cross-site request forgery flaw in the web management interface. Attackers with valid credentials can...

Fedora 44 : vhs (2026-d6f01a944d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d6f01a944d advisory. Update to version 0.11.0 and adopt go-vendor-tools. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

Towards Agentic Investigation of Security Alerts

Security analysts are overwhelmed by the volume of alerts and the low context provided by many detection systems. Early-stage investigations typically require manual correlation across multiple log sources, a task that is usually time-consuming. In this paper, we present an experimental, agentic...

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.4.8 contained security vulnerabilities. These vulnerabilities stemmed from the absence of blacklist entries for environment variables such as HGRCPATH, CARGOBUILDRUSTCWRAPPER,...

python-dev-tools (>=2019.4.24, <=2019.5.3) potentially affected by CVE-2026-6357 via pip (19.1.0)

pip PYPI version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.4.24, =2019.5.3 Source cves: CVE-2026-6357 Source advisory: OSV:GHSA-JP4C-XJXW-MGF9...

notebooktoall (>=0.1.7, <=0.2.0), python-dev-tools (>=2019.2.25, <=2019.3.1) potentially affected by CVE-2026-6357 via pip (19.0.2)

pip PYPI version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - notebooktoall =0.1.7, =2019.2.25, =2019.3.1 Source cves: CVE-2026-6357 Source advisory: OSV:GHSA-JP4C-XJXW-MGF9...

python-dev-tools (>=2019.8.14, <=2019.8.24) potentially affected by CVE-2026-6357 via pip (19.2.2)

pip PYPI version 19.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.8.14, =2019.8.24 Source cves: CVE-2026-6357 Source advisory: OSV:GHSA-JP4C-XJXW-MGF9...

RHSA-2026:10703 Red Hat Security Advisory: container-tools:rhel8 security update

Bulletin has no description...

Important: Red Hat Security Advisory: container-tools:rhel8 security update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security h...