41056 matches found
CLSA-2026-1789380988 TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 23 org.springframework packages to address 20 CVEs. Fixed in 5.2.11.RELEASE-tuxcare.1...
CLSA-2026-1789377089 TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 23 org.springframework packages to address 4 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.5...
github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy
A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass...
About the security content of macOS Golden Gate 27
About the security content of macOS Golden Gate 27 This document describes the security content of macOS Golden Gate 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
About the security content of macOS Tahoe 26.7
About the security content of macOS Tahoe 26.7 This document describes the security content of macOS Tahoe 26.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
About the security content of watchOS 27
About the security content of watchOS 27 This document describes the security content of watchOS 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
PT-2026-91280
DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, AuthorizeActionFilter performs no authorization because its explicit ICommandActionFilter.OnCommandExecutingAsync, IViewModelActionFilter.OnViewModelCreatedAsync, and...
About the security content of iOS 26.7 and iPadOS 26.7
About the security content of iOS 26.7 and iPadOS 26.7 This document describes the security content of iOS 26.7 and iPadOS 26.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
About the security content of iOS 27 and iPadOS 27
About the security content of iOS 27 and iPadOS 27 This document describes the security content of iOS 27 and iPadOS 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
CLSA-2026-1789218209 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.1.21-tuxcare.13...
SecureForce
SecureForce - 침투 테스트 프레임워크 승인된 보안 테스트 및 경쟁 분석을 위해 구축된 단순하지만 강력한 침투 테스트 프레임워크입니다. SecureForce는 익스플로잇 관리, 페이로드 생성 및 통제된 공격 실행을 위한 직관적인 인터페이스를 제공합니다. 기능 익스플로잇 라이브러리 : 다양한 취약점에 대한 체계적인 익스플로잇 모듈 페이로드 생성 : 다중 형식 페이로드 생성 셸코드, 리버스 셸 등 대화형 콘솔 : 공격 오케스트레이션을 위한 명령 기반 인터페이스 모듈형 아키텍처 : 사용자 정의 익스플로잇 및 페이로드로 쉽게...
Shopper: Negative discount values accepted and propagated through order calculation pipeline
Summary The Shopper Framework discount management functionality accepts negative discount values without server-side validation. It was confirmed that negative fixed-amount discounts can be created through the administrative interface, persisted to the database, and subsequently processed by the...
GHSA-5VF4-452P-JJHF Shopper: Negative discount values accepted and propagated through order calculation pipeline
Summary The Shopper Framework discount management functionality accepts negative discount values without server-side validation. It was confirmed that negative fixed-amount discounts can be created through the administrative interface, persisted to the database, and subsequently processed by the...
[SECURITY] Fedora 45 Update: gegl04-0.4.70-5.fc45
GEGL Generic Graphics Library is a graph based image processing framework. GEGLs original design was made to scratch GIMP's itches for a new compositing and processing core. This core is being designed to have minimal dependencies and a simple well defined API...
Microsoft .NET Framework (September 2026)
The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. CVE-2026-62886 - Heap-based buffer overfl...
PT-2026-90547
Summary The Shopper Framework discount management functionality accepts negative discount values without server-side validation. It was confirmed that negative fixed-amount discounts can be created through the administrative interface, persisted to the database, and subsequently processed by the...
CVE-2026-89044
Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final fail to properly validate the final transfer coding in the Transfer-Encoding header, allowing attackers to smuggle requests by using malformed encoding declarations. Attackers can split Transfer-Encoding...
CVE-2026-89044
Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final fail to properly validate the final transfer coding in the Transfer-Encoding header, allowing attackers to smuggle requests by using malformed encoding declarations. Attackers can split Transfer-Encoding...
WordPress Redux Framework plugin <= 4.5.13.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by h0xilo in WordPress Plugin Redux Framework versions = 4.5.13.1...
CVE-2026-5399
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Slider field in User Profile settings in versions up to and including 4.5.13.1. This is due to insufficient input sanitization in the usermetasave function which only sanitizes array values, not scalar...