GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: kube-bench, crossplane-provider-family-aws, azcopy, eksctl, rancher-helm, nri-postgresql, postgres-operator, cloud-provider-vsphere, pguser, dkron, dask-gateway, flux-notification-controller, newrelic-infra-operator, kuberlr, nats-top, timescaledb-parallel-copy,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, cert-manager-openshift-routes-fips, mig-parted, sqlexporter-fips, extism, cephcsi-fips, hydra, agentbeat, gatekeeper-fips, src, flux-source-watcher, tofu-controller-fips, crossplane-provider-sql, vault-fips, terraform-provider-pagerduty,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, cert-manager-openshift-routes-fips, mig-parted, sqlexporter-fips, extism, cephcsi-fips, hydra, agentbeat, gatekeeper-fips, src, flux-source-watcher, tofu-controller-fips, crossplane-provider-sql, vault-fips, terraform-provider-pagerduty,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, xcaddy, cert-manager-openshift-routes-fips, mig-parted, sqlexporter-fips, extism, cephcsi-fips, hydra, agentbeat, gatekeeper-fips, src, flux-source-watcher, tofu-controller-fips, crossplane-provider-sql, vault-fips, terraform-provider-pagerduty,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, xcaddy, cert-manager-openshift-routes-fips, mig-parted, sqlexporter-fips, extism, cephcsi-fips, hydra, gatekeeper-fips, src, flux-source-watcher, tofu-controller-fips, crossplane-provider-sql, vault-fips, terraform-provider-pagerduty,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, xcaddy, cert-manager-openshift-routes-fips, mig-parted, sqlexporter-fips, extism, cephcsi-fips, hydra, agentbeat, gatekeeper-fips, src, flux-source-watcher, tofu-controller-fips, crossplane-provider-sql, vault-fips, terraform-provider-pagerduty,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, cert-manager-openshift-routes-fips, mig-parted, sqlexporter-fips, extism, cephcsi-fips, hydra, agentbeat, gatekeeper-fips, src, flux-source-watcher, tofu-controller-fips, crossplane-provider-sql, vault-fips, terraform-provider-pagerduty,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, xcaddy, cert-manager-openshift-routes-fips, mig-parted, sqlexporter-fips, extism, cephcsi-fips, hydra, gatekeeper-fips, src, flux-source-watcher, tofu-controller-fips, crossplane-provider-sql, vault-fips, terraform-provider-pagerduty,...

Mandiant Finds ShinyHunters-Style Vishing Attacks Stealing MFA to Breach SaaS Platforms

Google-owned Mandiant on Friday said it identified an "expansion in threat activity" that uses tradecraft consistent with extortion-themed attacks orchestrated by a financially motivated hacking group known as ShinyHunters. The attacks leverage advanced voice phishing aka vishing and bogus...

MAL-2026-610 Malicious code in snapshot-date (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e86008d35e5f11e68c465940563127cdc9ba1d4b2963f092914bf8e9ce2587b This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...

Malicious code in snapshot-date (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e86008d35e5f11e68c465940563127cdc9ba1d4b2963f092914bf8e9ce2587b This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.0-IF008. Vulnerability Details CVEID:CVE-2019-17543 DESCRIPTION: LZ4 before 1.9.2 has a heap-based buffer overflow in...

Security Bulletin: Due to use of VMware vCenter, IBM Cloud Pak System is affected by header injection and denial-of-service vulnerabilities [CVE-2025-41250,CVE-2025-41241]

Summary Due to use of VMware vCenter, IBM Cloud Pak System is affected by header injection and denial-of-service vulnerabilities CVE-2025-41250,CVE-2025-41241. IBM Cloud Pak System has addressed these vulnerabilities. IBM Cloud Pak System includes the patched vCenter Server 8.0 U3g release as par...

Security Bulletin: Multiple Vulnerabilities in VMware ESXi affect IBM Cloud Pak System

Summary Vulnerabilities in VMware ESXi affect IBM Cloud Pak System. IBM Cloud Pak System has addressed vulnerabilities. Cloud Pak Sytem has delivered updated workload nodes to VMware ESXi 83U3g. Vulnerability Details CVEID:CVE-2025-41236 DESCRIPTION: VMware ESXi, Workstation, and Fusion contain a...

CLEANSTART-2026-ZP68963 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-RX06615 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

EUVD-2026-4966

Umbraco.Forms has Path Traversal and File Enumeration Vulnerabilities in Linux/Mac...

Umbraco.Forms has Path Traversal and File Enumeration Vulnerabilities in Linux/Mac

Impact It's possible for an authenticated backoffice-user to enumerate and traverse paths/files on the systems filesystem and read their contents, on Mac/Linux Umbraco installations using Forms. As Umbraco Cloud runs in a Windows environment, Cloud users aren't affected. Patches This issue affect...

Exploit for CVE-2026-7731

CTT-Refraction-Vortex-CVE-2026-7731- Under CTT, we see it as a...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to Denial of Service (DoS) due to malformed token parsing in golang.org/x/oauth2 module (CVE-2025-22868)

Summary Potential vulnerabilities in golang.org/x/oauth2 module CVE-2025-22868 have been identified that may affect IBM Cloud Pak for Data Vulnerability Details CVEID:CVE-2025-22868 DESCRIPTION: An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during...