35641 matches found
CVE-2026-55851
CVE-2026-55851 affects Netty (codec-haproxy) where the HAProxyMessageDecoder reads the 13th byte as a signed value and sign-extends to int, causing a PROXY v2 prefix with 0xFF to collide with the decoder’s need-more-data sentinel. This leads to unbounded cumulation and potential memory exhaustion...
Agentless Threat Detection: Illuminating Cloud Blind Spots
How Agentless Workload Detection exposes hidden threats in virtual appliances and modern cloud networks...
CVE-2026-55626
creationtimestamp| type| source ---|---|--- 2026-07-20 21:16:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr47p6qwva2o...
Malicious code in neroteam-v1 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8a87642ea3c7a291704b2306a242bb496048571efcafb63835055f0871aed19 Importing the nero package triggers nero/init.py to load nero.main, whose top-level code runs a guard routine before executing a hidden payload. guar...
MAL-2026-10868 Malicious code in neroteam-v1 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8a87642ea3c7a291704b2306a242bb496048571efcafb63835055f0871aed19 Importing the nero package triggers nero/init.py to load nero.main, whose top-level code runs a guard routine before executing a hidden payload. guar...
Medium: tomcat10
Issue Overview: Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0...
Oracle Linux 9 : .NET / 9.0 (ELSA-2026-41896)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41896 advisory. 9.0.119-1.0.1 - Add support for Oracle Linux 9.0.119-1 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 9.0.118-2 - Reduce time...
Amazon Linux 2023 : tomcat9, tomcat9-admin-webapps, tomcat9-el-3.0-api (ALAS2023-2026-1945)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1945 advisory. Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 throug...
.NET 10.0 security, bug fix, and enhancement update
10.0.110-1.0.1 - Add support for Oracle Linux 10.0.110-1 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 10.0.109-2 - Reduce time to detect hanging builds - Resolves: RHEL-191640...
Medium: tomcat
Issue Overview: Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0...
.NET 8.0 security, bug fix, and enhancement update
8.0.129-1.0.1 - Add support for Oracle Linux 8.0.129-1 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 8.0.128-2 - Reduce time to detect hanging builds - Resolves: RHEL-191652...
MAL-2026-10780 Malicious code in data-parser-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e63ddac8a229de35d497a342d918dbf4255d76e932db5ac33f1cf7db1a9e1939 The package's advertised parsexml/parsejson functions invoke an internal checkenvironment routine that, after a host-uptime sandbox-evasion gate 300...
Malicious code in data-parser-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e63ddac8a229de35d497a342d918dbf4255d76e932db5ac33f1cf7db1a9e1939 The package's advertised parsexml/parsejson functions invoke an internal checkenvironment routine that, after a host-uptime sandbox-evasion gate 300...
CVE-2026-64061
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfsreadgaps Fix netfsreadgaps to release the sink page it uses after waiting for the request to complete. The way the sink page is used is that an ITERBVEC-class iterator is created that ha...
CVE-2026-64149 dma-mapping: move dma_map_resource() sanity check into debug code
In the Linux kernel, the following vulnerability has been resolved: dma-mapping: move dmamapresource sanity check into debug code dmamapresource uses pfnvalid to ensure the range is not RAM. However, pfnvalid only checks for availability of the memory map for a PFN but it does not ensure that the...
CVE-2026-63871
CVE-2026-63871 concerns the Linux kernel Bluetooth ISO path. The issue is a data-race on the iso_pi fields passed to hci_get_route() in iso_connect_bis(), iso_connect_cis(), iso_listen_bis(), and iso_conn_big_sync(), which read iso_pi(sk)->dst/src/src_type without holding lock_sock(). Concurre...
Exploit for CVE-2026-60137
wp2shell-scanner by @bahartanirhttps://github.com/baha...
CVE-2026-16211
creationtimestamp| type| source ---|---|--- 2026-07-19 08:06:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqyd3tl5li2b...