CVE-2026-24490 MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field

MobSF is a mobile application security testing tool used. Prior to version 4.4.5, a Stored Cross-site Scripting XSS vulnerability in MobSF's Android manifest analysis allows an attacker to execute arbitrary JavaScript in the context of a victim's browser session by uploading a malicious APK. The...

SUSE CVE-2026-23511

ZITADEL is an open source identity management platform. Prior to 4.9.1 and 3.4.6, a user enumeration vulnerability has been discovered in Zitadel's login interfaces. An unauthenticated attacker can exploit this flaw to confirm the existence of valid user accounts by iterating through usernames an...

Knock Subdomain Scan security vulnerability

Knock Subdomain Scan is a domain name scanning tool developed by Gianni Amato. Version 4.1.1 of Knock Subdomain Scan contains a security vulnerability, which stems from unfiltered server headers, potentially allowing for CSV injection attacks...

Hono cross-site scripting vulnerability

Hono is a web framework written in TypeScript for the Hono community. Versions of Hono prior to 4.11.7 contained a cross-site scripting vulnerability. This vulnerability stemmed from the ErrorBoundary component, which allowed cross-site scripting, potentially enabling the execution of arbitrary...

PT-2026-5014

Name of the Vulnerable Software and Affected Versions Hono versions prior to 4.11.7 Description A Cross-Site Scripting XSS issue exists in the ErrorBoundary component of the hono/jsx library. Untrusted data from users may be rendered as raw HTML, potentially allowing execution of arbitrary script...

OpenSSL security vulnerabilities

OpenSSL is an open-source encryption library developed by the OpenSSL team that enables secure implementation of Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. This product supports various encryption algorithms, including symmetric ciphers, hash algorithms, and secure...

UBUNTU-CVE-2025-69419

Issue summary: Calling PKCS12getfriendlyname function on a maliciously crafted PKCS12 file with a BMPString UTF-16BE friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption...

Ubuntu: Security Advisory (USN-7975-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

java-21-openjdk-21.0.10.0-1.1 on GA media (moderate)

java-21-openjdk-21.0.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10093-1 Rating: moderate Cross-References: CVE-2026-21925 CVE-2026-21932 CVE-2026-21933 CVE-2026-21945 CVSS scores: CVE-2026-21925 SUSE : 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-21932 SUSE : 7.4...

java-11-openjdk-11.0.30.0-1.1 on GA media (moderate)

java-11-openjdk-11.0.30.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10091-1 Rating: moderate Cross-References: CVE-2026-21925 CVE-2026-21932 CVE-2026-21933 CVE-2026-21945 CVSS scores: CVE-2026-21925 SUSE : 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-21932 SUSE : 7.4...

Easy CD & DVD Cover Creator has a security vulnerability

Easy CD & DVD Cover Creator is a CD/DVD cover creation software developed by Ben Williamson. Version 4.13 of Easy CD & DVD Cover Creator has a security vulnerability; this vulnerability stems from a buffer overflow in the serial number input field, which may cause the application to crash...

PT-2026-4858

Name of the Vulnerable Software and Affected Versions gmrtd versions prior to 0.17.2 Description The gmrtd Go library contains a flaw where the ReadFile function accepts TLVs Tag-Length-Value with lengths up to 4GB. This can lead to excessive resource consumption, including memory and CPU cycles,...

PT-2026-4891

Name of the Vulnerable Software and Affected Versions datavane tis versions prior to 4.3.0 Description An issue exists in datavane tis related to a loop with an unreachable exit condition, resulting in an infinite loop. This condition is present in the ChangeDomainAction.Java file within the...

TIS security vulnerabilities

TIS is an agile code development platform open source by Datavane. Versions of TIS prior to v4.3.0 contained security vulnerabilities. These vulnerabilities stemmed from the program file XmlFile.Java, which allowed unlimited uploading of dangerous type files and untrusted data deserialization...

PT-2026-5012

Name of the Vulnerable Software and Affected Versions Hono versions prior to 4.11.7 Description The Cache Middleware component does not properly handle HTTP cache control directives such as Cache-Control: private or Cache-Control: no-store. This can lead to private or authenticated responses bein...

Kaspesky Secure Mail Gateway Positive results

...

AzerothCore security vulnerabilities

AzerothCore is an open-source game server developed by AzerothCore. Versions of AzerothCore 4.0.0 and earlier contained security vulnerabilities, which were caused by out-of-bounds writes in the inflate.C file, potentially leading to classic buffer overflow attacks...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005064)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005064 advisory. In the Linux kernel, the following vulnerability has been resolved: drm: vc4: Fix possible null pointer dereference In vc4hdmiaudioinit ofgetaddress may return NULL...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005178)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005178 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential out-of-bounds memory access in nilfsfindentry Syzbot reported that when...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005019)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005019 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 Johan reported the below cras...