Lucene search
+L

35405 matches found

Fedora
Fedora
added 2026/07/29 1:2 a.m.6 views

[SECURITY] Fedora 44 Update: restic-0.19.1-1.fc44

Fast, secure, efficient backup program. restic supports the following backends for storing backups natively: Local directory sftp server via SSH HTTP REST server protocol, rest-server Amazon S3 either from Amazon or using the Minio server OpenStack Swift BackBlaze B2 Microsoft Azure Blob Storage...

9.8CVSS5.5AI score0.00744EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/29 12:0 a.m.15 views

PT-2026-65690

The wp-media-folder-addon WordPress plugin through 4.1.6 does not validate a user-supplied parameter before using it in a file read operation in two AJAX actions available to unauthenticated users, leading to Arbitrary File Disclosure and Server-Side Request Forgery on sites where a cloud storage...

7.5CVSS5.8AI score0.00489EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2026/07/29 12:0 a.m.8 views

ThreatForest: Multi-Agent Attack Tree Generation with Pluggable TTP Framework Mapping

Threat modeling is essential for secure software development, yet manual analysis of cloud-native architectures is slow and demands scarce security expertise. We present ThreatForest, a multi-agent system that generates structured attack trees from source code repositories, maps attack steps to...

5.6AI score
SaveExploits0
NVD
NVD
added 2026/07/28 9:17 p.m.10 views

CVE-2026-13463

IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files...

7.5CVSS0.00224EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/28 8:53 p.m.12 views

EUVD-2026-50065

IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files...

7.5CVSS5.9AI score0.00224EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/28 8:53 p.m.30 views

CVE-2026-13463

IBM Cloud Pak System 2.3.5.0 is affected by CVE-2026-13463 due to hard-coded credentials in IBM Storage Protect leading to local disclosure of sensitive information via log files. The IBM Security Bulletin (CVE-2026-13463) notes the root cause CWE-798 and specifies a fix: upgrade to version 2.3.5...

7.5CVSS5.9AI score0.00224EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/28 8:53 p.m.9 views

CVE-2026-13463 Due to use of IBM Storage Protect, IBM Cloud Pak System is affected by vulnerability []

IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files...

7.5CVSS5.9AI score0.00224EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/28 8:53 p.m.35 views

CVE-2026-13463 Due to use of IBM Storage Protect, IBM Cloud Pak System is affected by vulnerability []

IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files...

7.5CVSS0.00224EPSS
SaveExploits0References1
Chainguard
Chainguard
added 2026/07/28 8:24 p.m.20 views

CVE-2026-54250 vulnerabilities

Vulnerabilities for packages: rke2-cloud-provider, rke2-cloud-provider-fips...

5.8CVSS7.4AI score0.00122EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/07/28 8:24 p.m.17 views

GHSA-JXR7-MQHW-9P98 vulnerabilities

Vulnerabilities for packages: rke2-cloud-provider, rke2-cloud-provider-fips...

5.2AI score
SaveExploits0
Wolfi
Wolfi
added 2026/07/28 8:23 p.m.20 views

GHSA-JXR7-MQHW-9P98 vulnerabilities

Vulnerabilities for packages: rke2-cloud-provider...

5.8AI score
SaveExploits0
Wolfi
Wolfi
added 2026/07/28 8:23 p.m.14 views

CVE-2026-54250 vulnerabilities

Vulnerabilities for packages: rke2-cloud-provider...

5.8CVSS5.8AI score0.00122EPSS
SaveExploits0
CVE
CVE
added 2026/07/28 7:59 p.m.38 views

CVE-2026-16347

MikroTik RouterOS contains an API authentication weakness where rate-limiting, account lockout, and source-based restrictions are not effectively enforced. The system can permit repeated failed logins; some versions include a fixed per-connection delay that can be bypassed via concurrent sessions...

8.8CVSS5.9AI score0.00233EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/28 4:18 p.m.10 views

CVE-2026-43910

Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. From 8.2.1 until 10.1.1, when directConnecttrue is enabled, AppiumCommandExecutor.setDirectConnect reads the directConnectHost, directConnectPort, and directConnectPath fields from...

8.2CVSS0.00239EPSS
SaveExploits1References4
Wiz blog
Wiz blog
added 2026/07/28 3:58 p.m.14 views

The risk hiding behind exposed MCP servers

How unauthenticated Model Context Protocol MCP servers are opening doors to sensitive cloud data, IAM, and command execution...

5.9AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/07/28 3:38 p.m.10 views

CVE-2026-43910

Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. From 8.2.1 until 10.1.1, when directConnecttrue is enabled, AppiumCommandExecutor.setDirectConnect reads the directConnectHost, directConnectPort, and directConnectPath fields from...

8.2CVSS5.9AI score0.00239EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2026/07/28 3:38 p.m.58 views

CVE-2026-43910

CVE-2026-43910 affects the Appium Java Client (8.2.1–10.1.1). When directConnect(true) is enabled, AppiumCommandExecutor.setDirectConnect() rebuilds the client’s server URL from directConnectHost, directConnectPort, and directConnectPath in the server’s NEW_SESSION response, validating only HTTPS...

8.2CVSS5.9AI score0.00239EPSS
SaveExploits1References4Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/28 1:43 p.m.19 views

Malicious code in simple-probe-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0457a026ab28fbb641d11e4e9ac9d60d026fd77210972f72e6ac931b4b06c59c On npm install, postinstall.js executes shell commands that query cloud instance metadata services AWS IMDS at 169.254.169.254, plus Tencent, Aliyun,...

5.9AI score
SaveExploits0References2
OSV
OSV
added 2026/07/28 1:42 p.m.9 views

MAL-2026-11134 Malicious code in color-convert-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ede9e30312b6e32aeb2a3ed39042fed67db7f1cee50591f906a228f61673ef9 The package's postinstall.js runs automatically on npm install and executes a shell pipeline that collects host identity hostname, whoami, id, sudo -...

5.9AI score
SaveExploits0References1
OSV
OSV
added 2026/07/28 1:37 p.m.10 views

MAL-2026-11151 Malicious code in text-line-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e51069873e7107964bf35c4ad5deace11fd5269366791475b18d0426902749 The package advertises itself as a text/line parsing utility, but its shipped index.js contains only unrelated color-conversion stubs...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder