CVE-2026-18537: Improper Control of Generation of Code

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a Kubernetes operator template...

CVE-2026-18533: Improper Control of Generation of Code

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image configuration in a Kubernetes operator template...

CVE-2026-18529: Improper Neutralization of Special Elements used in an OS Command

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task...

CVE-2026-18517: Improper Access Control

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Kubernetes NetworkPolicy...

CVE-2026-18513: Improper Privilege Management

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition...

CVE-2026-75881: Uncontrolled Resource Consumption

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing certain inputs...

CVE-2026-21136: Undefined Security Weakness

Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process...

PT-2026-110969

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite - Location Service for Esri versions 9.0 through 9.2 Description Improper input validation occurs due to an unsanitised container image reference within a Kubernetes operator template. Recommendations At the moment...

PT-2026-110967

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite - Location Service for Esri Component versions 9.0 through 9.2 Description Command injection is possible due to improper sanitization of a user-controlled value passed to a shell command within a Kubernetes operato...

PT-2026-110966

🚨 CVE-2026-18517 IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Kubernetes NetworkPolicy. 🎖@cveNotify...

PT-2026-110971

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite - IoT Component version 9.0.0 IBM Maximo Application Suite - IoT Component version 9.1.0 IBM Maximo Application Suite - IoT Component version 9.2.0 Description A remote attacker can cause a denial of service by...

PT-2026-110992

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite - IoT Component version 9.0.0 IBM Maximo Application Suite - IoT Component version 9.1.0 IBM Maximo Application Suite - IoT Component version 9.2.0 Description A remote attacker can cause a denial of service throug...

PT-2026-110859

Name of the Vulnerable Software and Affected Versions psqlODBC versions prior to 18.00.0005 Description An integer wraparound in the SQLBindParameter function occurs because the binding count is stored in a signed 16-bit field. When the 32,768th parameter is bound, the count wraps to -32,768...

PT-2026-110968

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite - Location Service for Esri versions 9.0 through 9.2 Description Improper input validation occurs due to an unsanitised container image configuration within a Kubernetes operator template. Recommendations At the...

PT-2026-110965

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite - Location Service for Esri versions 9.0 through 9.2 Description Improper access control exists due to a schema-less Custom Resource Definition, which is a way to extend the Kubernetes API with custom objects witho...

PT-2026-111109

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 Description A remote authenticated attacker can obtain sensitive information because session tokens are exposed within the HTML response. Recommendations At the moment, there is no...

PT-2026-110963

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite versions 8.10 through 9.2 Description A remote attacker can perform directory traversal on the system. By sending a specially crafted URL request containing "dot dot" sequences /../, an attacker can view arbitrary...

eyeballer

Eyeballer Échale un vistazo rápido a esas capturas de pantalla. Eyeballer está diseñado para pruebas de penetración de red de gran alcance donde necesitas encontrar objetivos "interesantes" de un gran conjunto de hosts basados en web. Utiliza tu herramienta de captura de pantalla favorita como...

opentaint

El motor de analisis de taint de codigo abierto para la era de la IA Analisis de taint formal para la seguridad de aplicaciones — encuentra lo que los motores de coincidencia de patrones AST pasan por alto, permite a los agentes LLM aplicar vulnerabilidades como reglas, escala donde ninguno puede...

ntopng

ntopng Introducción ntopng® es una aplicación web de monitorización de tráfico de red publicada bajo GPLv3. Es la nueva encarnación del ntop original escrito en 1998, y ahora renovado en términos de rendimiento, usabilidad y funcionalidades. Aunque puedes leer más sobre ntopng en el sitio web de...