CVE-2026-0530 vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2025-68385 vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-X89F-99HF-GMR7 vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2025-12653 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-workhorse-ce...

CVE-2025-11042 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips...

CVE-2025-10569 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips...

CVE-2020-36969

Removed by vendor...

GHSA-XHP4-6G9V-4XVJ vulnerabilities

Vulnerabilities for packages: redis...

GHSA-6RV6-R2F2-GQRC vulnerabilities

Vulnerabilities for packages: python...

GHSA-PRHJ-8562-P8GJ vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-XP28-3FV9-33C6 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-22865 vulnerabilities

Vulnerabilities for packages: gradle...

GHSA-9JWR-P39P-HWG2 vulnerabilities

Vulnerabilities for packages: nodejs...

ROS-20260128-73-0052

Vulnerability in kernel-lt related to implementation of incorrect control flow. Exploitation of the vulnerability may allow an attacker to cause a denial of service...

CVE-2025-59729 vulnerabilities

Vulnerabilities for packages: ffmpeg...

GHSA-J382-5JJ3-VW4J vulnerabilities

Vulnerabilities for packages: wildfly...

CVE-2025-15281 vulnerabilities

Vulnerabilities for packages: glibc...

📄 MCPJam 1.4.2 Command Injection

This Metasploit exploit module targets the MCP Model Context Protocol server, specifically exploiting a command injection vulnerability in the /api/mcp/connect endpoint. The vulnerability allows unauthorized remote command execution by sending crafted JSON payloads that are executed by the server...

CVE-2026-24117 vulnerabilities

Vulnerabilities for packages: kyverno, slsa-verifier, trivy-operator, zot, buildkitd, ko, tflint, tkn, kubescape, gh, gitsign, neuvector-sigstore-interface, skaffold, aactl, crossplane, spire-server, vexctl, trivy, cosign, policy-controller, falcoctl, kyverno-notation-aws, witness, goreleaser,...

CVE-2026-22985

In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations The RSS LUT is not initialized until the interface comes up, causing the following NULL pointer crash when ethtool operations like rxhash on/off are performed befor...