Astra Linux – Vulnerability in Chromium

In version 119.0.6045.199 of Google Chrome’s Spellcheck, type confusion allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations of site isolation in Google Chrome prior to version 105.0.5195.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation through a crafted HTML page...

Astra Linux – Vulnerability in PostgresSQL 11

A flaw was discovered in the psql interactive terminal of PostgreSQL in versions prior to 13.1, prior to 12.5, prior to 11.10, prior to 10.15, prior to 9.6.20, and prior to 9.5.24. If an interactive psql session uses \gset when querying a compromised server, the attacker can execute arbitrary cod...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Side-channel information leakage in keyboard input in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page...

Astra Linux – Vulnerability in Firefox

A compromised content process could have performed session history manipulations that it should not have been able to due to a testing infrastructure that wasn’t restricted to only testing configurations. This vulnerability affects Firefox versions less than 88...

Palo Alto Networks PAN-OS 0.0.x < 10.1.11 / 10.2.x < 10.2.8 / 11.0.x < 11.0.3 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 0.0.x prior to 10.1.11, 10.2.x prior to 10.2.8, or 11.0.x prior to 11.0.3. It is, therefore, affected by a vulnerability. A privilege escalation PE vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an...

Malicious code in @convertics/script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13be868ded5b7b55a544d4a21c0c693a4b259b5ed2f50452d316951627d3852c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-87451

Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87518

Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-87518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to...

certgraveyard_yara v2026.09.02

CertGraveyard YARA Rules Generator Automated YARA rule generation from the CertGraveyard compromised certificate database. Features 🔄 Daily Updates : Automatically checks CertGraveyard for new compromised certificates 📝 YARA Rule Generation : Creates individual YARA rules for each certificate ✅...

SUSE-SU-2026:3898-1 Security update for python-httplib2

This update for python-httplib2 fixes the following issue: - CVE-2026-59939: unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate can lead to OOM-kill in the client process when it connects to a compromised HTTP server bsc1271095...

Malicious code in 3layerdipstackkaw1i8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a481301975d70f149e4948a37b36cbe5e70ac46ada2e81c66b17215332b538 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

SUSE CVE-2026-79065

Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-62341 HCL Connections is vulnerable to server-side request forgery (SSRF)

HCL Connections is vulnerable to server-side request forgery SSRF when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass...

CVE-2026-79082

A flaw was found in the Transactions Platform of Google Chrome. An attacker who has compromised the renderer process could exploit an incorrect authorization vulnerability by crafting a malicious HTML page. This could allow them to bypass the web origin policy, potentially leading to unauthorized...

Linux Distros Unpatched Vulnerability : CVE-2026-79220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive...

CVE-2026-79220

Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79220

Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...