SUSE-SU-2026:4610-1 Security update for flatpak

This update for flatpak fixes the following issues: - CVE-2026-90616: missing symlink protection allows a malicious sandboxed app to obtain arbitrary read and write access to files on the host bsc1280236. - CVE-2026-92162: path traversal via unvalidated arch parameter in DeployAppstream bsc128251...

CGA-77R3-9MQ3-4V7G

Bulletin has no description...

CGA-GQXW-MGQX-VR4F

Bulletin has no description...

CGA-G5RC-C677-MG54

Bulletin has no description...

CGA-QJR8-W98H-P3M3

Bulletin has no description...

FudgeC2

FudgeC2 FudgeC2は、チームコラボレーションとキャンペーンタイムラインを容易にするために設計されたPowershell C2プラットフォームであり、BlackHat Arsenal USA 2019で公開されました。これは、クライアントがレッドチームの活動をよりよく理解できるよう、敵対的テクニックのより詳細な情報を提供することを目的としています。 Python3とWebフロントエンドで構築されたFudgeC2は、レッドチームオペレーターに、キャンペーン全体でアクティブなインプラントを管理するためのシンプルなインターフェースを提供することを目指しています。...

CGA-6JMJ-2HP7-5M96

Bulletin has no description...

burp-exporter

Exporter Extension for Burp Suite Community and Pro Follow us to know more about tips and others extensions Description Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. It also adds a tab called Exporter where you can...

CGA-GV67-RV47-FFWM

Bulletin has no description...

CGA-RGCM-H2Q5-X9HV

Bulletin has no description...

CGA-X425-JX77-39F9

Bulletin has no description...

CVE-2026-107813 Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node and namespace mutation operations and cluster-wide Nginx reload or restart operations with AuthRequired but without RequireSecureSession. An authenticated OTP-enabled user...

CVE-2026-107813 Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node and namespace mutation operations and cluster-wide Nginx reload or restart operations with AuthRequired but without RequireSecureSession. An authenticated OTP-enabled user...

EUVD-2026-95898

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node and namespace mutation operations and cluster-wide Nginx reload or restart operations with AuthRequired but without RequireSecureSession. An authenticated OTP-enabled user...

CVE-2026-107813 Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node and namespace mutation operations and cluster-wide Nginx reload or restart operations with AuthRequired but without RequireSecureSession. An authenticated OTP-enabled user...

CVE-2026-107813

Versions 2.0.0 through 2.5.0 of Nginx UI are affected by an incomplete fix for CVE-2026-84315. The api/cluster router exposes sensitive node and namespace mutation operations, as well as cluster-wide Nginx reload or restart operations, using AuthRequired but failing to include RequireSecureSessio...

CGA-VXH9-F82W-46CF

Bulletin has no description...

CGA-F4VJ-Q8HM-G28V

Bulletin has no description...

Exploit for CVE-2026-104586

CVE-2026-104586: AUTOM8N WHM/cPanel Plugin OS Command Injectio...

Umbra

Umbra Umbra 是一个实验性的远程可控 LKM rootkit，适用于 4.x 和 5.x（最高至 5.7）内核。它通过打开网络后门，可以向远程主机发起反弹 shell、远程启动恶意软件等。 该 rootkit 仍在开发中，但以下列出的功能已完全可用。 注意：此 rootkit 是在内核 5.4.0 和 Ubuntu 18.04 上开发并测试的。 功能特性 🌟 后门：在收到恶意 TCP 数据包后，向远程 IP 发起反弹 shell。 🌟 使用 Umbra Injector 远程控制 rootkit： 远程反弹 shell。 远程隐藏/显示 rootkit。 启动 Umbra 模块...