@dreamguyxeon/baileyx (>=1.0.0, <=5.0.0), @rishi56/baileys (1.0.0) +2 more potentially affected by unknown CVE via @dgxeon13/libsignal-node (1.0.0)

@dgxeon13/libsignal-node NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @dgxeon13/libsignal-node and may be impacted: - @dreamguyxeon/baileyx =1.0.0, =1.0.0, =1.0.2 - sayan-soket 1.0.0 Source cves: unknown CVE Source advisory:...

Haiwell IoT Cloud HMI Gateway

ADVISORY SUMMARY Successful exploitation of this vulnerability may allow an attacker to inject and execute arbitrary OS commands with root privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize...

Johnson Controls Metasys

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow a low-privilege user or attacker to inject a persistent malicious payload via a crafted URL that executes in the context of other users' sessions, including administrators, potentially leading to session hijacking and...

CVE-2026-18704

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:43+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813 2026-08-15 14:00:38+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mt4tidhjus2x 2026-08-15 14:00:52+00:00| seen|...

CVE-2026-18691

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:12+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-16770

creationtimestamp| type| source ---|---|--- 2026-08-13 04:15:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-16770 2026-08-13 13:50:13+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxrxlctru2t 2026-08-14 09:00:44+00:00| seen|...

CVE-2026-49473

creationtimestamp| type| source ---|---|--- 2026-08-13 03:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mswnpr75nj2m 2026-08-13 04:15:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-49473...

PT-2026-71588

Unauthenticated Broken Access Control in Anti Spam and list cleaner AcyChecker = 2.0.0 versions...

PT-2026-71850

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an improper buffer write...

Oracle Linux 8 : grafana (ELSA-2026-54243)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54243 advisory. - Fixes CVE-2024-1442 Add email verification when updating user email Orabug: 38550520 - Resolves RHEL-219393: CVE-2026-42127 Tenable has extracted th...

ROS-20260813-73-0023

The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

Oracle Linux 8 / 9 : java-17-openjdk (ELSA-2026-42887)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42887 advisory. 1:17.0.20.0.8-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.20.0.8-1.1 - Sync java-17-openjdk-portable.specfile from...

PT-2026-71842

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper authentication may allow a remote attacker to execute arbitrary code or obtain sensitive information. Recommendations At the moment, there is no information about a newer version that contain...

CVE-2026-53789

rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope of --delete operations beyond the intended destination subtree by sending a crafted file list that causes rsync to reclassify implied parent directory entries or treat synthetic...

PT-2026-71827

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to delete arbitrary files due to path traversal...

CVE-2026-53786

rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override module-level filter restrictions by supplying malicious --filter merge file directives. Attackers can inject client-side merge file directives during filter evaluation to introduce rules...

Debian dsa-6437 : libaprutil1-dbd-mysql - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6437 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6437-1 [email protected] https://www.debian.org/securit...

CVE-2026-17485

creationtimestamp| type| source ---|---|--- 2026-08-12 23:43:23+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117085189103703507 2026-08-13 02:41:52+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mswmmqwewl2h 2026-08-18 17:07:06+00:00| seen|...

GHSA-CXGV-HP74-JJ7R

creationtimestamp| type| source ---|---|--- 2026-08-12 23:33:59+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mswc4s4x6u2w...

CVE-2026-64413 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64413 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...