Laravel Backpack CRUD: CRUD panel query scopes are not enforced on Update, Delete, and Reorder (cross-tenant IDOR)

Summary Backpack CRUD's list and read operations correctly apply any query scopes registered via addClause / addBaseClause e.g. tenant isolation, user ownership. However, the Update, Delete, and Reorder operations bypassed these scopes, fetching records directly from the unscoped model query. An...

java-17-openjdk security update

An update is available for java-17-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-17-openjdk packages provide the OpenJDK 17 Java Runtime...

EUVD-2026-63413

Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2026-18267

The Kenwood DNR1007XR firmware update process fails to validate symbolic links, allowing a physically present, unauthenticated attacker to move files to arbitrary locations and execute code as root. No fixed version is available; affected versions are unspecified. Exploitation requires physical d...

CVE-2026-74284

A flaw was found in the Linux kernel's Hierarchical Fair Service Curve HFSC queueing discipline schhfsc. When a child qdisc drops its last packets, the updatevf function can be called twice for the same class, causing it to be marked passive multiple times. This double transition can lead to a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.70 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby4.0: ruby4.0-4.0.6-37.2.hum1 aarch64, x8664 ruby4.0-bundled-gems-4.0.6-37.2.hum1 aarch64, x8664 ruby4.0-default-gems-4.0.6-37.2.hum1 noarch ruby4.0-devel-4.0.6-37.2.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.70 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

CVE-2026-64962

ATutor is vulnerable to Cross-Site Request Forgery CSRF in profile update functionality. An attacker can craft a malicious website which, when visited by an authenticated victim, submits a forged request to the system. Due to the lack of proper CSRF token implementation, the forged request is...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.96 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.96 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

Description of the security update for Word 2016: August 11, 2026 (KB5002901)

None None...

EUVD-2026-63362

ATutor is vulnerable to Cross-Site Request Forgery CSRF in profile update functionality. An attacker can craft a malicious website which, when visited by an authenticated victim, submits a forged request to the system. Due to the lack of proper CSRF token implementation, the forged request is...

CVE-2026-64962 Cross-Site Request Forgery (CSRF) in ATutor

ATutor is vulnerable to Cross-Site Request Forgery CSRF in profile update functionality. An attacker can craft a malicious website which, when visited by an authenticated victim, submits a forged request to the system. Due to the lack of proper CSRF token implementation, the forged request is...

CVE-2026-64962 Cross-Site Request Forgery (CSRF) in ATutor

ATutor is vulnerable to Cross-Site Request Forgery CSRF in profile update functionality. An attacker can craft a malicious website which, when visited by an authenticated victim, submits a forged request to the system. Due to the lack of proper CSRF token implementation, the forged request is...

CVE-2026-64962

ATutor's profile update functionality lacks CSRF token validation, allowing an attacker to craft a malicious site that submits forged profile-modification requests when visited by an authenticated victim. CVSS 5.1 (Medium), network attack vector. ATutor is end-of-life; no fix exists—upgrade to a ...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.96 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.96 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

ROOT-OS-DEBIAN-11-CVE-2026-54241 CVE-2026-54241 in libde265 - Patched by Root

Root has patched CVE-2026-54241 in the libde265 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-31344 CVE-2025-31344 in giflib - Patched by Root

Root has patched CVE-2025-31344 in the giflib package for Root:Debian:11. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-MMX7-HFXF-JPPX GHSA-mmx7-hfxf-jppx in axios - Patched by Root

Root has patched GHSA-mmx7-hfxf-jppx in the axios package for Root:npm. Multiple fixed versions available...

Moderate: Red Hat Security Advisory: OpenJDK 11.0.32.1 ELS Security Update For Portable Linux Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...