SUSE-SU-2026:4668-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pcigetdevwrapper bsc1254633. - CVE-2024-56644: net/ipv6: release expired exception dst cached in socket bsc1216813...

From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)

An enterprise mail server authenticates users, stores private communications, delivers recovery links, runs calendars, and sends mail that employees and other systems trust. Compromising it can therefore expose both email and the identities and workflows built around it. During a broader assessme...

WPSniper

WPSniper CVE-2026-87902 detector for WordPress Core. getpagetemplate can be steered so page-template resolution includes a readable local .php file outside the active theme. WPSniper fingerprints the site, picks a published pageid, probes the include class, and only prints VULN when a strong PEAR...

CVE-2019-9978-Social-Warfare-WordPress-RCE

🚀 CVE-2019-9978 – Social Warfare WordPress Plugin RCE ⚠️ DISCLAIMER: This repository is for educational and authorized security testing only. Use only on systems you own or have explicit written permission to test. Unauthorized access is illegal. 📋 Overview Property| Value ---|--- CVE ID|...

CVE-2025-54123

CVE-2025-54123 Hoverfly Command Injection to RCE PoC Overview This repository contains a Python proof-of-concept PoC script for interacting with Hoverfly instances affected by CVE-2025-54123. The script supports: Authentication using username/password credentials Authentication using an existing...

Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in the IBM Netezza Appliance have been remediated in the latest security patch releases of NPS and Callhome. Vulnerability Details CVEID:CVE-2026-59999 DESCRIPTION: In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2022-50645: EDAC/i10nm: fix refcount leak in pcigetdevwrapper bsc1254633. CVE-2025-39964: kernel: crypto: afalg - Disallow concurrent writes in afalgsendmsg bsc1251966...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues: The following security issues were fixed: CVE-2022-50645: EDAC/i10nm: fix refcount leak in pcigetdevwrapper bsc1254633. CVE-2024-56644: net/ipv6: release expired exception dst cached in socket bsc1216813...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: CVE-2022-50645: EDAC/i10nm: fix refcount leak in pcigetdevwrapper bsc1254633. CVE-2025-39964: crypto: afalg - Disallow concurrent writes in afalgsendmsg bsc1251966...

SUSE-SU-2026:4665-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pcigetdevwrapper bsc1254633. - CVE-2025-39964: crypto: afalg - Disallow concurrent writes in afalgsendmsg bsc1251966....

Security update for bind

This update for bind fixes the following issues: CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver bsc1280432. CVE-2026-19666: Use-after-free in...

CVE-2026-16740 Missing Authentication for Critical Function in TR7 Cyber ​​Defense's TR7 ASP

Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239...

CVE-2026-16740 Missing Authentication for Critical Function in TR7 Cyber ​​Defense's TR7 ASP

Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239...

CVE-2026-16740

TR7 Cyber Defense Inc. TR7 ASP is vulnerable to OS Command Injection due to a Missing Authentication for Critical Function vulnerability (CWE-306). This issue affects TR7 ASP on both virtual and physical appliances. Specifically, it impacts versions 1.0.40.236 before 1.0.1554.2331 and versions 1....

EUVD-2026-101020

Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239...

Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce

Overview While performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered CVE-2026-108065, an SQL Injection vulnerability CWE-89 in Channel Software WebAlliance eCommerce.The exploit allows a malicious actor to read sensitive data from the database, or,...

CVE-2026-16741 OS Command in TR7 Cyber ​​Defense's TR7 ASP

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 befor...

CVE-2026-16741 OS Command in TR7 Cyber ​​Defense's TR7 ASP

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 befor...

EUVD-2026-101019

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 befor...

CVE-2026-16741

The TR7 ASP software by TR7 Cyber Defense Inc. is vulnerable to an OS Command Injection flaw due to the improper neutralization of special elements used in an OS command. This vulnerability affects the virtual appliance and physical appliance versions. Specifically, the affected versions include ...