[SECURITY] Fedora 45 Update: docker-distribution-3.1.2-1.fc45

The toolkit to pack, ship, store, and deliver container content. This package provides Docker Registry - a service for storing and distributing OCI and Docker container images...

Fedora 44 : docker-distribution (2026-6ac19bf6ee)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6ac19bf6ee advisory. - Update to release v3.1.2 - Resolves: rhbz2540024 - Resolves CVE-2026-41178: rhbz2515091 - Resolves CVE-2026-85747 - Upstream fixes and enhancement...

CVE-2026-104019 OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio

OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might...

CVE-2026-104019 OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio

OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might...

CVE-2026-15409

🚀 CVE-2026-15409 – RCE en Erlang en SonicWall SMA 1000 a través del proxy WebSocket Exploit de prueba de concepto para CVE-2026-15409 – ejecución remota de código no autenticada en los dispositivos de la serie SonicWall SMA 1000 a través del protocolo de distribución de Erlang tunelizado sobre...

CVE-2026-104912

MISP contains an authorization flaw in its correlation handling during attribute searches. When a user performs an attribute search that triggers correlation lookups, the system authorized access to correlated attributes and events based on a stale distribution snapshot stored on the correlation...

CVE-2026-104912

The MISP platform contains an authorization flaw in its correlation handling during attribute searches, affecting versions prior to v2.5.48 . The root cause is that the system uses a stale distribution snapshot stored on the correlation row—which is a point-in-time copy lacking a published flag—i...

sccm-http-looter

SCCM HTTP Looter Cómo funciona Los puntos de distribución DP de SCCM son los servidores que Microsoft SCCM utiliza para alojar todos los archivos usados en instalaciones de software, parches, implementaciones de scripts, etc. Por defecto, estos servidores permiten el acceso mediante SMB TCP/445 y...

Fedora 45 : docker-distribution (2026-13584cfe41)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-13584cfe41 advisory. - Update to release v3.1.2 - Resolves: rhbz2540024 - Resolves CVE-2026-41178: rhbz2515091 - Resolves CVE-2026-85747 - Upstream fixes and enhancement...

CentOS Linux 8.5 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1790933161)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1790933161 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

CVE-2026-31431_Kernel_Checker

Para servidores con Internet libre: curl -fsSL https://raw.githubusercontent.com/ShahaB108/CVE-2026-31431KernelChecker/main/kernelcheck.sh | bash Para servidores en Irán: curl -fsSL https://raw.githubusercontent.com/ShahaB108/CVE-2026-31431KernelChecker/main/irkernelupdate.sh | bash...

CVE-2026-103884

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

CVE-2026-103884

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

EUVD-2026-90972

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

CVE-2026-103884

A flaw exists in the X.509 client certificate authenticator of Keycloak . When CRL Distribution Point checking is enabled, the server fails to properly validate file paths provided within a client certificate. This path traversal vulnerability allows an attacker to provide a specially crafted cer...

CVE-2026-22020-Weak-Seed-in-Quantum-Key-Distribution-Error-Correction

CVE-2026-22020 – Semilla débil en la corrección de errores de distribución de claves cuánticas Código del programa Python qkdweakseed.py - Simulated QKD privacy amplification with weak seed import hashlib, os, time def privacyamplificationsiftedkey, seed: Weak: seed derived from current time,...

ipv6_frag_escape

IPV6FRAGESCAPE — Sitio de seguimiento del escape de contenedores por fragmentación IPv6 en Linux Fuente del rastreador de estado de parches IPV6FRAGESCAPE : un sitio de una sola página que registra qué distribuciones han publicado una corrección para el escape de contenedores por fragmentación IP...

vex-repo-spec

Especificación del Repositorio VEX v0.1 Especificación del Repositorio VEX v0.1 1. Versionado 2. Manifiesto del Repositorio 2.1 Descripción General 2.2 Ubicación del Archivo 2.3 Esquema 2.4 Ejemplo 2.5 Descripciones de Campos y Notas de Uso Campos Principales Subcampos de versions Subcampos de...

xz

xz — 便携二进制发行版 打包自 xz-utils 5.8.3 （已修复 CVE-2024-3094 后门漏洞）—— 为 x-cmd 包生态提供的便携二进制发行版。 安装 macOS / Linux（有 x 命令）： x eget x-cmd-build/xz --to /usr/local/bin/xz 手动： 1. 打开 https://github.com/x-cmd-build/xz/releases 2. 下载匹配你平台的 asset 3. 解压，把 xz（或 xz.exe）放到 PATH 资产命名 文件| 平台 ---|--- xz-linux-musl-x64.tar.x...

CVE-2026-103659

MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containment from the query and returns object attributes as top-level event attributes. In doing so, the object-level distributi...