135691 matches found
PT-2026-67685
Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...
Important: perl-DBI
Issue Overview: DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the ismatched method, = was evaluated using Perl...
SUSE SLED15 / SLES15 Security Update : perl-Net-DNS (SUSE-SU-2026:3456-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3456-1 advisory. This update for perl-Net-DNS fixes the following issue - CVE-2026-64194: RFC 1035 compression pointers are followed via...
Amazon Linux 2023 : perl-DBI, perl-DBI-tests (ALAS2023-2026-2006)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2006 advisory. DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some...
Amazon Linux 2 : runfinch-finch, --advisory ALAS2DOCKER-2026-137 (ALASDOCKER-2026-137)
The version of runfinch-finch installed on the remote host is prior to 1.17.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-137 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root wh...
PT-2026-67849
Name of the Vulnerable Software and Affected Versions ERPNext versions prior to 15.115.0 ERPNext versions prior to 16.26.0 Description Improper authorization occurs due to insufficient access control in the whitelisted API method erpnext.crm.doctype.prospect.prospect.get opportunities. This allow...
Amazon Linux 2023 : runfinch-finch (ALAS2023-2026-2023)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2023 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /...
Security update for thrift (important)
openSUSE Security Update: Security update for thrift Announcement ID: openSUSE-SU-2026:0275-1 Rating: important References: 1263321 1263322 1263365 1263438 1263492 1263557 1272609 1272645 1272647 1272648 1272649 1272650 1272651 1272652 1272653 1272654 1272655 1272656 1272657 1272658...
📄 AnyDesk 9.0.4 Denial of Service
AnyDesk version 9.0.4 contains a local privilege-lacking vulnerability in its "Send Support Information" feature. An attacker with low-privileged local access can abuse NTFS junctions reparse points to redirect file write operations performed by the AnyDesk service. The service blindly follows th...
📄 Flowise 3.1.2 Authenticated Remote Code Execution
A proof of concept exploit for an authenticated remote code execution vulnerability in Flowise version 3.1.2. The vulnerability allegedly exists because several record-manager and agent-memory components parse user-controlled additionalConfig JSON and pass its properties directly to a TypeORM...
PECR: A Reproducible Specification and Synthetic Stress Test of Telemetry-Informed Vulnerability Prioritization for SD-WAN
Software-defined wide-area networking concentrates operational authority in controllers, orchestrators, and Internet-facing edges, but severity-only remediation queues do not represent current exposure or evidence quality. This paper specifies Predictive Exposure and Cryptographic Readiness PECR,...
PT-2026-67887
Name of the Vulnerable Software and Affected Versions Ghost versions 2.2.0 through 6.54.0 Description Ghost Admin fails to invalidate existing sessions during the login process, which could enable session fixation attacks. Session fixation is a method where an attacker provides a valid session...
Important: perl-DBI
Issue Overview: DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the ismatched method, = was evaluated using Perl...
Amazon Linux 2023 : python3-pillow, python3-pillow-devel, python3-pillow-tk (ALAS2023-2026-2013)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2013 advisory. Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can s...
SUSE SLES12 Security Update : perl-DBI (SUSE-SU-2026:3461-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3461-1 advisory. - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. -...
Amazon Linux 2 : perl-DBI, --advisory ALAS2-2026-3851 (ALAS-2026-3851)
The version of perl-DBI installed on the remote host is prior to 1.627-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3851 advisory. DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's...
Important: runfinch-finch
Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...
vigolium v0.3.6
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...
httpgrep v4.7
Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...
