RHSA-2026:60005 Red Hat Security Advisory: isns-utils security update

Bulletin has no description...

Important: Red Hat Security Advisory: isns-utils security update

An update for isns-utils is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Important: Red Hat Security Advisory: isns-utils security update

An update for isns-utils is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: isns-utils security update

An update for isns-utils is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

ROOT-OS-DEBIAN-12-CVE-2026-34743 CVE-2026-34743 in xz-utils - Patched by Root

Root has patched CVE-2026-34743 in the xz-utils package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2020-27748 CVE-2020-27748 in xdg-utils - Patched by Root

Root has patched CVE-2020-27748 in the xdg-utils package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2022-4055 CVE-2022-4055 in xdg-utils - Patched by Root

Root has patched CVE-2022-4055 in the xdg-utils package for Root:Debian:12. Multiple fixed versions available...

RHEL 10 : isns-utils (RHSA-2026:60005)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60005 advisory. The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service iSNS protocol allow...

RHEL 9 : isns-utils (RHSA-2026:60006)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60006 advisory. The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service iSNS protocol allows...

CVE-2026-80350: Server-Side Request Forgery (SSRF)

OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhook delivery path calls SSRFProtection.validateWebhookTargetIsSafe, and the host-literal screening inside...

RHEL 9 : isns-utils (RHSA-2026:59999)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59999 advisory. The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service iSNS protocol allows...

RHEL 9 : isns-utils (RHSA-2026:59996)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59996 advisory. The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service iSNS protocol allows...

RHEL 9 : iscsi-initiator-utils (RHSA-2026:60427)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60427 advisory. The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface iSCSI protocol, as well as th...

CVE-2026-72701: Observable Timing Discrepancy

Grav CMS before 2.0.16 contains a timing vulnerability in Utils::verifyNonce that uses non-constant-time string comparison with the === operator instead of hashequals for CSRF nonce validation. Attackers can measure response timing differences to recover valid nonce values byte-by-byte through...

EulerOS Virtualization 2.13.0 : nfs-utils (EulerOS-SA-2026-3225)

According to the versions of the nfs-utils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client ...

EulerOS Virtualization 2.13.1 : nfs-utils (EulerOS-SA-2026-3185)

According to the versions of the nfs-utils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client ...

MAL-2026-14410 Malicious code in @temptation.js/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8ac41747a5c926627c28c9f1a651df91cd3447b07ca4cafabc1916004d1e70 The package registers a preinstall hook node index.js that runs on npm install and harvests installer-side data: os.hostname, OS username, home...

Malicious code in @temptation.js/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8ac41747a5c926627c28c9f1a651df91cd3447b07ca4cafabc1916004d1e70 The package registers a preinstall hook node index.js that runs on npm install and harvests installer-side data: os.hostname, OS username, home...

ROOT-OS-DEBIAN-11-CVE-2026-34743 CVE-2026-34743 in xz-utils - Patched by Root

Root has patched CVE-2026-34743 in the xz-utils package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-78145: URL Redirection to Untrusted Site

A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function issafeurl of the file CTFd/utils/validators/init.py. Such manipulation of the argument Next leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be...