42453 matches found
[SECURITY] Fedora 45 Update: rclone-1.75.0-2.fc45
"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...
Security Bulletin: IBM Cloud Pak for Data is vulnerable to prototype pollution due to flatted ( CVE-2026-33228 )
Summary Potential vulnerabilities in flatted package CVE-2026-33228 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-33228 DESCRIPTION: flatted is a circular JSON parser. Prior to version 3.4.2, the parse function in flatted can use...
Security Bulletin: IBM Cloud Pak for Data is vulnerable to server-side request forgery due to axios ( CVE-2025-62718 )
Summary Potential vulnerabilities in axios package CVE-2025-62718 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2025-62718 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not...
Security Bulletin: IBM Cloud Pak for Data is vulnerable to buffer overflow due to cryptography ( CVE-2026-39892 )
Summary Potential vulnerabilities in cryptography package CVE-2026-39892 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-39892 DESCRIPTION: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From...
Vulnerabilities Affecting SICK CorivaEngine
SICK CorivaEngine includes the third-party components Netty and Spring Cloud Gateway that are affected by multiple known vulnerabilities. Under certain conditions, these vulnerabilities could allow remote attackers to perform HTTP request smuggling, cause resource exhaustion, or manipulate...
ImpactSword
ImpactSword – Red Team Edition ImpactSword is an offensive se...
CVE-2024-11222
creationtimestamp| type| source ---|---|--- 2026-09-11 14:00:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaq2esev62q 2026-09-14 07:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260914 2026-09-14 07:45:57+00:00| seen|...
CVE-2026-8030
creationtimestamp| type| source ---|---|--- 2026-09-11 14:00:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaq2esev62q 2026-09-14 07:45:17+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260914 2026-09-14 07:46:12+00:00| seen|...
CVE-2026-22575
creationtimestamp| type| source ---|---|--- 2026-09-11 13:55:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r...
Security Bulletin: IBM Cloud Pak for Data is vulnerable to OS command injection (CVE-2025-14754)
Summary IBM Cloud Pak for Data is vulnerable to OS command injection due to improper validation of user-supplied input. An authenticated remote attacker could exploit this vulnerability to execute arbitrary commands with elevated privileges on the system, potentially leading to full system...
Security Bulletin: IBM Cloud Pak for Data is vulnerable to path traversal (CVE-2025-14753)
Summary IBM Cloud Pak for Data is vulnerable to a path traversal attack. A remote attacker could send a specially crafted URL containing "dot dot" sequences /../ to traverse directories and view arbitrary files on the system, potentially exposing sensitive information. Vulnerability Details...
CVE-2026-19486
A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...
CVE-2026-19486 SSRF in Gemini Enterprise Agent Platform App Builder
A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...
CVE-2026-19486 SSRF in Gemini Enterprise Agent Platform App Builder
A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...
CVE-2026-19486
CVE-2026-19486 is a Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder (versions prior to 2026-06-01 on Google Cloud Platform). An unauthenticated attacker can exploit it to leak the Compute Engine default service account access token , r...
BIT-TOMCAT-2026-34487 Apache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token
Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token. This issue affects Apache Tomcat: from 11.0.0 through 11.0.20, from 10.1.0 through 10.1.53, from 9.0.13 through 9.0.116. Users are...
Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service and open redirect due to urllib3 (CVE-2025-50181, CVE-2025-66418, CVE-2025-66471)
Summary Potential vulnerabilities in urllib3 package CVE-2025-50181, CVE-2025-66418, CVE-2025-66471 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2025-50181 DESCRIPTION: urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is...
adversary-playbook
Adversary Playbook 14 battle-tested offensive-security skil...
agent-bom v0.104.0
Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. Quick start · Self-host · Deployment models · Product tour · Docs For security, AppSec and GRC teams: discover AI agents, MCP servers, packages, credential references and infrastructure across repositories,...
