12309 matches found
PT-2026-76674
Just a quick note that I saw a new SABB Active Backup spk posted this morning. Version is 3.2.1-25059 dated 12-Aug-2026. This is one of my most important packages so I'll be checking it out. Changelog Fixed a security vulnerability CVE-2026-15716 Fixed an issue where backing up or restoring Hyper...
Basecamp: One-click cross-account JavaScript execution steals a victim write token through Turbo pagination and unattached Active Storage HTML
A cross-account JavaScript execution vulnerability was discovered in a web application that allowed arbitrary code execution when a victim opened a crafted public board URL. An attacker with a separate account could leverage this vulnerability to steal the victim's write access token through a...
CVE-2026-74572
In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix deadlock between metadata writeback and transaction commit When writing out metadata extent buffers in a zoned filesystem, btreewritepages holds fsinfo-zonedmetaiolock across the whole writeback loop, including...
CVE-2026-74516
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM is using a separate MSR bitmap to run L2. If AVIC is...
SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch
A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts. The vulnerability, tracked as CVE-2026-58231 , is rated 10.0 on the CVSS scoring system. It relates to an instance of insufficient authorization checks and input validation. "SAP...
vulnerabilities handled in SAP Commerce Cloud Data Hub Adapter
SAP has identified a vulnerability in the Data Hub Adapter of SAP Commerce Cloud. An unauthorized malicious actor can exploit this vulnerability to execute arbitrary code. To do this, the malicious actor needs to send network traffic to the Data Hub Adapter. The security company Defused reports...
EUVD-2026-58818
A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol LDAP authentication handling. When an LDAP referral is returned during authentication, the system does not properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, enabling...
CVE-2026-74241
A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol LDAP authentication handling. When an LDAP referral is returned during authentication, the system does not properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, enabling...
JLSEC-2026-1322 sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior:...
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory...
CVE-2026-74241: Improper Neutralization of Special Elements used in an LDAP Query
A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol LDAP authentication handling. When an LDAP referral is returned during authentication, the system does not properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, enabling...
PT-2026-80564
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory...
CVE-2026-73491 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, ruby3.3-rails, commercial-gitlab-rails-ee, ruby4.0-rails, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, pghero-fips, ruby3.2-rails, ruby3.4-rails, pghero...
GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE
A newly disclosed zero-day flaw in GeoServer is seeing active exploitation efforts, per watchTowr. The vulnerability, which has yet to be assigned a CVE identifier, is an SQL injection vulnerability in the open-source platform that can lead to remote code execution RCE. The security defect remain...
internal-privesc-poc
Internal Privilege Escalation POC Library This library provid...
CVE-2026-66436
Unauthenticated SQL Injection in Active Products Tables for WooCommerce = 1.1.1 versions...
CVE-2026-66436 WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in Active Products Tables for WooCommerce = 1.1.1 versions...
EUVD-2026-57866
Unauthenticated SQL Injection in Active Products Tables for WooCommerce = 1.1.1 versions...
CVE-2026-66436 WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in Active Products Tables for WooCommerce = 1.1.1 versions...
