nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

org.apache.camel.kafkaconnector:camel-azure-storage-blob-append-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-azure-storage-blob-changefeed-source-kafka-connector (4.18.0) +13 more potentially affected by CVE-2026-66906 via org.apache.camel:camel-azure-storage-blob (>=4.15.0, <=4.18.3)

org.apache.camel:camel-azure-storage-blob MAVEN version =4.15.0, =4.18.1, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =3.33.2 - org.apache.cam...

org.apache.camel.kafkaconnector:camel-google-storage-event-based-source-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-google-storage-sink-kafka-connector (4.18.0) +6 more potentially affected by CVE-2026-66907 via org.apache.camel:camel-google-storage (>=4.15.0, <=4.18.3)

org.apache.camel:camel-google-storage MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.3 Source cves: CVE-2026-66907 Source advisory: OSV:GHSA-F78G-9385-QXQJ...

JLSEC-2026-1219 Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a...

Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed...

org.apache.camel.kafkaconnector:camel-aws-s3-event-based-source-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-aws-sqs-batch-sink-kafka-connector (4.18.0) +9 more potentially affected by CVE-2026-56140 via org.apache.camel:camel-aws2-sqs (>=4.15.0, <=4.18.2)

org.apache.camel:camel-aws2-sqs MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-56140 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821197...

org.apache.camel.kafkaconnector:camel-aws-s3-event-based-source-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-aws-sqs-batch-sink-kafka-connector (4.18.0) +9 more potentially affected by CVE-2026-46456 via org.apache.camel:camel-aws2-sqs (>=4.15.0, <=4.18.2)

org.apache.camel:camel-aws2-sqs MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46456 Source advisory: GHSA-CMC3-HR79-8MMV...

CVE-2026-9080

Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed...

CVE-2026-9080 UAF after pause in socket callback

Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed...

UBUNTU-CVE-2026-9080

Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed...

org.apache.camel.kafkaconnector:camel-google-pubsub-kafka-connector (>=0.1.0, <=0.11.5), org.apache.camel.kafkaconnector:camel-google-pubsub-sink-kafka-connector (>=1.0.0, <=4.14.5) +13 more potentially affected by CVE-2025-27636 +1 more via org.apache.camel:camel-google-pubsub (>=3.0.0, <=4.14.5)

org.apache.camel:camel-google-pubsub MAVEN version =3.0.0, =0.1.0, =1.0.0, =1.0.0, =3.19.0, =4.8.0, =0.9.0, =4.7.0, =4.7.0, =1.0.0-m6, =1.0.0-m6, =1.0.0-m6, =1.5.0, =3.0.0, =0.1.9, =0.1.6, =2025.1...

org.apache.camel.kafkaconnector:camel-google-pubsub-kafka-connector (>=0.1.0, <=0.11.5), org.apache.camel.kafkaconnector:camel-google-pubsub-sink-kafka-connector (>=1.0.0, <=4.14.5) +13 more potentially affected by CVE-2026-40453 via org.apache.camel:camel-google-pubsub (>=3.0.0, <=4.14.5)

org.apache.camel:camel-google-pubsub MAVEN version =3.0.0, =0.1.0, =1.0.0, =1.0.0, =3.19.0, =4.8.0, =0.9.0, =4.7.0, =4.7.0, =1.0.0-m6, =1.0.0-m6, =1.0.0-m6, =1.5.0, =3.0.0, =0.1.9, =0.1.6, =2025.1...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from null event access and potential PEBS record loss, which could result in the event pointer being cleared...

EUVD-2010-4725

Malware in sbrugna...

Characterizing Event-Themed Malicious Web Campaigns: A Case Study on War-Themed Websites

Cybercrimes such as online scams and fraud have become prevalent. Cybercriminals often abuse various global or regional events as themes of their fraudulent activities to breach user trust and attain a higher attack success rate. These attacks attempt to manipulate and deceive innocent people int...

CVE-2025-38055

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix segfault with PEBS-via-PT with samplefreq Currently, using PEBS-via-PT with a sample frequency instead of a sample period, causes a segfault. For example: BUG: kernel NULL pointer dereference, address:...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in perf/x86 that causes a segmentation error during PEBS-via-PT sampling frequency configuration...

Medium: python-twisted

Issue Overview: Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is fixed in 24.7.0rc1...

Debian dsa-5797 : python3-twisted - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5797 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5797-1 [email protected] https://www.debian.org/securit...

CVE-2024-41810

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The twisted.web.util.redirectTo function contains an HTML injection vulnerability. If application code allows an attacker to control the redirect URL this vulnerability may result in Reflected Cross-Site...

CVE-2024-41671

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is fixed in 24.7.0rc1...