BIT-OPENBAO-2025-54998 OpenBao Userpass and LDAP User Lockout Bypass

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, attackers could bypass the automatic user lockout mechanisms in the OpenBao Userpass or LDAP auth systems. This was caused by...

BIT-OPENBAO-2025-52893 OpenBao May Leak Sensitive Information in Logs When Processing Malformed Data

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao before v2.3.0 may leak sensitive information in logs when processing malformed data. This is separate from the earlier HCSEC-2025-09 / CVE-2025-4166. Th...

CVE-2026-49978

creationtimestamp| type| source ---|---|--- 2026-07-27 03:57:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlyvhpipy23 2026-07-27 03:57:18+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrlyvyqouo23...

CVE-2026-48342

creationtimestamp| type| source ---|---|--- 2026-07-27 03:50:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlyj2kfki2u 2026-07-27 03:50:06+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrlyj4krkw2l...

librenswan: IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload

A flaw was found in Libreswan's implementation of IKEv2 authentication when processing signatures utilizing the RSASSA-PKCS1-v15 scheme. The RSAauthenticatehashsignaturepkcs115rsa function does not correctly validate the DER encoding of the ASN.1 digest. A remote, unauthenticated attacker could...

Important: Red Hat Security Advisory: libreswan security update

An update for libreswan is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2026-48343

creationtimestamp| type| source ---|---|--- 2026-07-27 03:19:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlwrn7sab2m 2026-07-27 03:19:14+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrlwrw5bjt2y...

CVE-2026-61520

creationtimestamp| type| source ---|---|--- 2026-07-27 03:11:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlweengnh2r 2026-07-27 03:11:40+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrlweem42i2m...

PT-2026-65044

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, OpenBao allowed the assignment of policies and MFA attribution based upon entity aliases, chosen by the underlying auth method. Whe...

PT-2026-64948

Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce = 2.16.1 versions...

CVE-2026-64243

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

PT-2026-65324

Name of the Vulnerable Software and Affected Versions Kali Forms versions 2.4.18 and earlier Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations Update Kali Forms to a...

PT-2026-64965

Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor = 2.8.0 versions...

CVE-2025-63913

An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function 2 or the 'Find and configure a matching counter' function of SBI PMU extension...

PT-2026-64906

Name of the Vulnerable Software and Affected Versions GNU Binutils affected versions not specified Description A heap-buffer-overflow read occurs in the linker when processing a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker can provide a malicious file...

PT-2026-65312

Name of the Vulnerable Software and Affected Versions OpenSBI version 1.3 Description An issue exists that allows attackers to cause a denial of service by sending a crafted request to the SBI function 2 or the 'Find and configure a matching counter' function of the SBI PMU Performance Monitoring...

PT-2026-65034

NGINX Plus and NGINX Open Source have a vulnerability in the ngx http proxy v2 module and ngx http grpc module modules. This vulnerability exists when the proxy http version to 2 or grpc pass directives are used to proxy HTTP/2 traffic, the ignore invalid headers directive is set to off, and the...

macOS 15.x < 15.7.8 Multiple Vulnerabilities (128071)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.7.8. It is, therefore, affected by multiple vulnerabilities: - A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6...

PT-2026-65230

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 nested virtualization implementation within the kvm hyp handle mops function. The function resets the single-step state machine during the state rewind f...