Amazon Corretto Java 17.x < 17.0.21.0.10 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is 17 prior to 17.0.21.0.10. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-17-2026-Oct-20 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

Oracle Java SE Critical Certificate Trust (CVE-2026-91403 Security Alert)

The 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, or 27.0.1 versions of Java installed on the remote host are affected by a vulnerability as referenced in the CVE-2026-91403 Oracle Security Alert advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM...

Red Hat: CVE-2026-55888: xdg-desktop-portal: xdg-desktop-portal: Unauthorized host file access via unvalidated FileChooser filenames

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file access to non-existing files on the host limited to files the user has access to. The FileChooser.SaveFiles method takes...

Linux Distros Unpatched Vulnerability : CVE-2026-55888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792751700)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792751700 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tpip6sendmsg When len =...

Node.js Node permissions and access control issues vulnerability

Node.js versions 26.12.0 and earlier contain a permission and access control vulnerability. This issue stems from improper enforcement of the permission model on the file system: when a request path is shorter than the wildcard authorization prefix, the base tree search stops comparing early and...

SUSE CVE-2026-98566

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: clamp freelist reconstruction requests The firmware reconstruction count controls accesses to the request's fixed freelist ID array and the copy into the fixed response array. Neither access currently bounds the...

SUSE CVE-2026-98583

In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: validate helper command length before pull The firmware download receive path removes the NCI data header and reads the helper command before validating the remaining packet length. A short frame can therefore reach...

CVE-2026-92450

The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string within the firmware image, identical across all deployed devices. An attacker with access to the publicly distributed firmware can...

CVE-2026-110491

The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections while the rest of the device continues operating normally, and will recover automatically after a period. This can be...

Incomplete List of Disallowed Inputs

Overview authlib is a library in building OAuth and OpenID Connect servers. Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via JWTBearerGrant.verifyclaims in authlib/oauth2/rfc7523/jwtbearer.py, where audience validation is skipped when getaudiences retur...

DEBIAN-CVE-2026-114618

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.getaudiences returns an empty list, causing JWTBearerGrant.verifyclaims to require only that an aud claim exists without matching the current authorization server. An...

CVE-2026-114618

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.getaudiences returns an empty list, causing JWTBearerGrant.verifyclaims to require only that an aud claim exists without matching the current authorization server. An...

CVE-2026-114618

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.getaudiences returns an empty list, causing JWTBearerGrant.verifyclaims to require only that an aud claim exists without matching the current authorization server. An...

CVE-2026-101619

A flaw was found in the InnoDB component of MySQL. A high-privileged attacker with network access could exploit this vulnerability to trigger an unexpected hang or crash of the database server. A successful attack can result in a complete Denial of Service DoS...

CVE-2026-92450

The Kiloview E3 NDI encoder firmware is vulnerable to a use of hard-coded credentials (CWE-798) within its authentication framework. The system signs session JSON Web Tokens using an HMAC-SHA256 secret that is hardcoded as a static string identical across all devices. An attacker who obtains the ...

CVE-2026-92450 Kiloview E3 NDI Encoder Use of Hard-coded Credentials

The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string within the firmware image, identical across all deployed devices. An attacker with access to the publicly distributed firmware can...

TryHack3M-Bricks-Heist

TryHack3M: Bricks Heist Exploit • Writeup • CTF Challenge A comprehensive repository containing a custom exploit and detailed writeup for the TryHack3M: Bricks Heist challenge Quick Start • Repository Structure • The Exploit • The Writeup • Disclaimer Overview This repository documents the...

qemu-kvm: qemu-guest-agent: Local privilege escalation via symlink attack in guest-ssh-add-authorized-keys

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...

CVE-2026-114618

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.getaudiences returns an empty list, causing JWTBearerGrant.verifyclaims to require only that an aud claim exists without matching the current authorization server. An...