GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: nemo, harbor, prometheus-elasticsearch-exporter, argocd-image-updater-fips, etcd-fips, nerdctl, tigera-operator, cilium-cli, etcd, flux-source-controller-fips, cloud-provider-aws, zarf-fips, mattermost-fips, kyverno-fips, argo-cd, trivy-operator-fips, rancher,...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass in the Post-Handshake SSH Channel process. An attacker can bypass access control by injecting extra data after the SSH handshake, allowing unauthorized access to restricted resources. Remediation Upgrade...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass in the Post-Handshake SSH Channel process. An attacker can bypass access control by injecting extra data after the SSH handshake, allowing unauthorized access to restricted resources. Remediation Upgrade...

GO-2026-5054 Chisel has an ACL Bypass via Post-Handshake SSH Channel ExtraData Injection in github.com/jpillora/chisel

Chisel has an ACL Bypass via Post-Handshake SSH Channel ExtraData Injection in github.com/jpillora/chisel...

Chisel has an ACL Bypass via Post-Handshake SSH Channel ExtraData Injection

Summary Authenticated chisel clients can bypass --authfile ACL restrictions and tunnel traffic to arbitrary destinations reachable from the server. The ACL is enforced only during the initial handshake against declared remotes, but never on subsequent SSH channels that carry actual traffic. A...

GHSA-24FP-5V3P-RVPW Chisel has an ACL Bypass via Post-Handshake SSH Channel ExtraData Injection

Summary Authenticated chisel clients can bypass --authfile ACL restrictions and tunnel traffic to arbitrary destinations reachable from the server. The ACL is enforced only during the initial handshake against declared remotes, but never on subsequent SSH channels that carry actual traffic. A...

CVE-2026-48113

creationtimestamp| type| source ---|---|--- 2026-05-20 23:29:51+00:00| published-proof-of-concept| https://github.com/jpillora/chisel/security/advisories/GHSA-24fp-5v3p-rvpw 2026-08-03 21:50:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7nkjzej2prh6t...

EUVD-2024-2473

Malicious code in bioql PyPI...

Cyber Criminals Exploit Open-Source Tools to Compromise Financial Institutions Across Africa

Cybersecurity researchers are calling attention to a series of cyber attacks targeting financial organizations across Africa since at least July 2023 using a mix of open-source and publicly available tools to maintain access. Palo Alto Networks Unit 42 is tracking the activity under the moniker...

Fedora: Security Advisory (FEDORA-2024-6b9aeecbe8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-37a2b3fac5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : chisel (2024-6b9aeecbe8)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6b9aeecbe8 advisory. Update to new upstream version closes rhbz2303131 Tenable has extracted the preceding description block directly from the Fedora security advisory...

New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus

Cybersecurity researchers have flagged a new malware campaign that infects Windows systems with a Linux virtual instance containing a backdoor capable of establishing remote access to the compromised hosts. The "intriguing" campaign, codenamed CRONTRAP , starts with a malicious Windows shortcut L...

[SECURITY] Fedora 39 Update: chisel-1.10.0-1.fc39

A fast TCP tunnel over HTTP...

[SECURITY] Fedora 41 Update: chisel-1.10.0-1.fc41

A fast TCP tunnel over HTTP...

Fedora: Security Advisory (FEDORA-2024-9b005962f9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-5aad2fda6a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 39 : chisel (2024-9b005962f9)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9b005962f9 advisory. Update to new upstream version closes rhbz2303131 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 40 : chisel (2024-5aad2fda6a)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5aad2fda6a advisory. Update to new upstream version closes rhbz2303131 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Hacktivist Group Twelve Targets Russian Entities with Destructive Cyber Attacks

A hacktivist group known as Twelve has been observed using an arsenal of publicly available tools to conduct destructive cyber attacks against Russian targets. "Rather than demand a ransom for decrypting data, Twelve prefers to encrypt victims' data and then destroy their infrastructure with a...