270838 matches found
CVE-2019-9745
Author: Arn Vollebregt Introduction Creativity is at the core of penetration testing, which keeps our work interesting. One pitfall however is the tendency to 'over-engineer' attack scenarios and focus solely on bugs error conditions. Flaws unintended behaviour may however be present with equally...
liferay-ga4-rce-research
Liferay CE 7.0.3 GA4 — Vulnerability Research RAPTOR Loop-Hunt A security audit of Liferay Portal CE 7.0.3 GA4 git tag 7.0.3-ga4, commit b2d7cc68a performed with the RAPTOR loop-hunt methodology: deterministic recon → 25 isolated generator agents reading raw source → 22 independent judge agents...
CISA-KEV
CISA-KEV Executive Summary This repository provides automated tracking and analysis of both CISA's KEV and VulnCheck KEV catalogs, cross-referenced with Nuclei security templates and public proof-of-concept exploits. By integrating VulnCheck KEV, coverage expands from 1,557 to 4,720 total unique...
React19-fix-vibecoders
React 19 & Next.js Security Fix Prompts for AI Agents 🚨 CRITICAL SECURITY VULNERABILITY - CVE-2025-55182 & CVE-2025-66478 This repository contains reusable prompts to help AI coding assistants automatically fix critical React/Next.js security vulnerabilities. 📋 What's Inside SECURITYFIXPROMPT.md...
Updated kernel, drakx-installer-images, kmod-nvidia-current-wopengpu, kmod-xtables-addons & kmod-virtualbox packages fix Security Vulnerabilities
Upstream kernel 6.18.55 version fixes bugs and vulnerabilities. The kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages have been updated to work with this new kernel...
VMware vCenter Server - Out-of-Bounds Write
vCenter Server contains an out-of-bounds write caused by a vulnerability in the DCERPC protocol implementation. A malicious actor with network access can trigger remote code execution on vCenter Server. id: CVE-2023-34048 info: name: VMware vCenter Server - Out-of-Bounds Write author: ritikchaddh...
CLEANSTART-2026-RU76121 In Bouncy Castle for Java before 1
CVE-2026-85515 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
gardyn
Summary In February 2025 I conducted security research on a Gardyn Home 4.0 device. During my research, I discovered multiple vulnerabilities and poor security practices. By leveraging these vulnerabilities an attacker may be able to gain system level access to a Gardyn device and use it to stage...
Oracle Linux 10 : hplip (ELSA-2026-82883)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82883 advisory. 3.26.6-1.3 - fix LEDM scanner regression 3.26.6-1.2 - fix OSH issues 3.26.6-1.1 - Create right dir 3.26.6-1 - RHEL-266547 IMAGE-MODE missing...
FreeBSD : p5-Plack -- Multiple vulnerabilities (fdb34ad1-c7ac-11f1-97dc-40b034429ecf)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the fdb34ad1-c7ac-11f1-97dc-40b034429ecf advisory. Plack project reports: SECURITY BUG FIXES BUG FIXES Tenable has extracted the preceding...
Oracle Linux 7 : gstreamer1-plugins-good (ELSA-2026-72367)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-72367 advisory. - Backport fix for CVE-2026-18295 Orabug: 40083058 - Backport fix for CVE-2026-18296 Orabug: 40083058 - Backport fix for CVE-2026-18298 Orabug: 400830...
CLSA-2026-1792000791 TuxCare security update for org.springframework.integration (14 CVEs)
TuxCare rebuilt 43 org.springframework.integration packages to address 14 CVEs. Fixed in 6.1.5-tuxcare.1...
CVE-2025-32462-and-CVE-2025-32463---Critical-Sudo-Vulnerabilities
This repository does not have a README...
Security Bulletin: Platform Navigator in IBM Integration is vulnerable to multiple vulnerabilities in undici
Summary Platform Navigator in IBM Integration is vulnerable to multiple vulnerabilities in undici. CVE-2026-18149, CVE-2026-18540, CVE-2026-19534, CVE-2026-84890, CVE-2026-84933, CVE-2026-84947, CVE-2026-84961, CVE-2026-85008, CVE-2026-85014, CVE-2026-85024 The vulnerabilities have been addressed...
Fedora 44 : chromium (2026-d94b4ed6e7)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d94b4ed6e7 advisory. Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427 Tenable has extracted the preceding...
Fedora 43 : python-jupytext (2026-3942ab86fd)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3942ab86fd advisory. See https://github.com/jupytext/jupytext/blob/main/CHANGELOG.md for changes in versions 1.19.5 and 1.19.6. For this update, a patch has been applied...
FreeBSD : Curl -- Multiple vulnerabilities (14dab969-c797-11f1-a6ea-8447094a420f)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 14dab969-c797-11f1-a6ea-8447094a420f advisory. The Curl project reports: Tenable has extracted the preceding description block directly from...
Slackware Linux 15.0 / current expat Multiple Vulnerabilities (SSA:2026-286-01)
The version of expat installed on the remote host is prior to 2.9.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-286-01 advisory. New expat packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...
CVE-2026-110157
creationtimestamp| type| source ---|---|--- 2026-10-13 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20261014 2026-10-14 15:31:03+00:00| seen| https://infosec.exchange/users/cve/statuses/117439978696005864...
CVE-2026-110156
creationtimestamp| type| source ---|---|--- 2026-10-13 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20261014 2026-10-14 15:30:22+00:00| seen| https://infosec.exchange/users/cve/statuses/117439976051818171 2026-10-19 18:00:00+00:00| seen|...