GHSA-25MV-J2QR-V5JQ vulnerabilities

Vulnerabilities for packages: ops-agent, azurefile-csi, crossplane-provider-aws-cur-fips, seaweedfs, postgres-operator-fips, crossplane-provider-aws-redshift-fips, crossplane-provider-aws-cloudformation, chronyexporter, crossplane-provider-aws-macie2-fips, melange, nri-kubernetes,...

CVE-2026-11814

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic attacker-in-the-middle to compromise the confidentiality and integrity of the affected device. This issue is limited to certain...

CVE-2026-11739 Command injection vulnerability in some NETGEAR Nighthawk devices

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic attacker in the middle to compromise the confidentiality and integrity of the affected device...

PT-2026-70233

Name of the Vulnerable Software and Affected Versions NETGEAR affected versions not specified Description A command injection flaw allows a network-adjacent attacker who can intercept and modify local network traffic attacker-in-the-middle to compromise the confidentiality and integrity of the...

EUVD-2021-12898

Malware in sbrugna...

Design/Logic Flaw

Rapid7 Nexpose and InsightVM versions prior to 6.6.172 failed to reliably validate the authenticity of update contents. This failure could allow an attacker to provide a malicious update and alter the functionality of Rapid7 Nexpose. The attacker would need some pre-existing mechanism to provide ...

CVE-2022-4261 Rapid7 Nexpose Update Validation Issue

Rapid7 Nexpose and InsightVM versions prior to 6.6.172 failed to reliably validate the authenticity of update contents. This failure could allow an attacker to provide a malicious update and alter the functionality of Rapid7 Nexpose. The attacker would need some pre-existing mechanism to provide ...