EUVD-2026-80389

A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...

CVE-2026-14917 Kong API Gateway Enterprise: SAML Authentication bypass

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. ...

CVE-2025-25706

CVE-2025-25706 描述项： root@kitploit: 产品厂商：freebsdbrasil 项目：ProApps - 企业应用 编辑器创建者：DreamWeaver PHP：PHP 版本 7.3.18 JavaScript 库：Jquery UI 1.6 | Jquery 1.2.6 服务器：NGINX 操作系统：FreeBDS Unix 漏洞类型： 远程代码执行 漏洞描述： 该漏洞的产生是因为用户可以通过应用程序的 ping 功能，在 Unix 环境中使用命令序列运算符（如 ;、&& 或 |）来注入系统命令。 利用该漏洞需要先进行身份认证。用户必须属于名为 'Statu...

CVE-2024-38856-ApacheOfBiz

CVE-2024-38856-ApacheOfBiz Apache OFBiz 是一个开源企业资源规划系统。它提供了一套企业应用程序，可集成并自动化企业中的许多业务流程。 CVE-2024-38856 是 Apache OFBiz 中的一个预认证漏洞，可能导致远程代码执行。 受影响版本 ：18.12.15 之前的版本 用法示例 ：python3 scanner.py https://localhost:8443/ python3 exploit.py https://localhost:8443/ 免责声明...

CVE-2026-92057

Mitigation bypass in the Enterprise Policies component. This vulnerabi...

UBUNTU-CVE-2026-92073

Privilege escalation in the Enterprise Policies component. This vulner...

Linux Distros Unpatched Vulnerability : CVE-2026-92057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

SUSE SLES12 Security Update : kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:4192-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4192-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes one security issue: The following security issue was fixed: - CVE-2026-64423:...

Linux Distros Unpatched Vulnerability : CVE-2026-92073

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153....

SUSE SLES15 Security Update : kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:4193-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4193-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed:...

UBUNTU-CVE-2026-92057

Mitigation bypass in the Enterprise Policies component. This vulnerabi...

CVE-2026-92073

Privilege escalation in the Enterprise Policies component. This vulner...

Mozilla Thunderbird < 153.3

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 153.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-96 advisory. - Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156,...

CVE-2026-87158

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite component: Enterprise Command Center. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management...

CVE-2026-83356

Vulnerability in the Enterprise Command Center Framework product of Oracle E-Business Suite component: Security. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Command Center...

CVE-2026-83355

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: Metrics. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83339

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-83325

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2026-83321

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Actions. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...