Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR MFSA 2026-100, bsc1282929: CVE-2026-96869: Information disclosure in the Networking component. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component...

SUSE-SU-2026:4543-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR MFSA 2026-100, bsc1282929: - CVE-2026-96869: Information disclosure in the Networking component. - CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback componen...

redStackPRO

redStackPRO Веб-канвас, на котором вы строите инфраструктуру как топологию, а затем экспортируете полный, готовый к запуску рабочий каталог Terraform и Ansible. Вы запускаете его со своей машины. redStackPRO никогда не хранит ваши облачные учётные данные. !IMPORTANT redStackPRO находится в стадии...

CVE-2026-80327 Open Redirect in PingGateway Fragment Filter

An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 and later...

CVE-2026-80327 Open Redirect in PingGateway Fragment Filter

An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 and later...

EUVD-2026-93358

An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 and later...

CVE-2026-80327

An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This vulnerability impacts PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. The issue allows for redirection to untrusted sites and is addressed in versions 2024.11.2...

CVE-2025-5840

CVE-2025-5840 Эксплойт CVE-2025-5840 на Python от hax / haxerr9 Как использовать: Убедитесь, что Python3 установлен в системе. Запустите "python3 CVE-2025-5840.py URL -c КОМАНДА". Не забудьте указать параметры перед запуском скрипта. Пример использования: НЕ ПРОВЕРЕНО Этот эксплойт не был...

Security Bulletin: Due to use of Nodejs Express.js, multiple vulnerabilities affect IBM Cloud Pak System[CVE-2024-43796, CVE-2024-43799, CVE-2024-43800]

Summary Multiple vulnerabilities in Send cross-site scripting XSS within the SendStream.redirect, serve-static built-in and response.redirect found in Node.js Express.js which is used by IBM Cloud Pak System. Vulnerabilities were addressed by IBM Cloud Pak System. Vulnerability Details...

SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities

1 CVE-2026-102255 - Pre-authentication SSRF via unintended forward-proxy A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this...

apache__incubator-dubbo_CVE-2021-30181_2-6-8

Проект Apache Dubbo Apache Dubbo — это мощный и удобный веб- и RPC-фреймворк. Он поддерживает несколько языковых реализаций, таких как Java, Go, Python, PHP, Erlang, Rust и Node.js/Web. Dubbo предоставляет решения для коммуникации, обнаружения сервисов, управления трафиком, наблюдаемости,...

ESAPI__esapi-java-legacy_CVE-2022-24891_2-2-3-1

Enterprise Security API для Java Legacy OWASP® ESAPI The OWASP Enterprise Security API — это бесплатная библиотека с открытым исходным кодом для контроля безопасности веб-приложений, которая упрощает программистам написание приложений с меньшим уровнем риска. Библиотека ESAPI для Java разработана...

USN-8869-1 rabbitmq-server vulnerability

It was discovered that RabbitMQ Server incorrectly handled certain HTTP/2 headers. An attacker could possibly use this issue to cause a denial of service via memory exhaustion...

USN-8869-1: RabbitMQ Server vulnerability

It was discovered that RabbitMQ Server incorrectly handled certain HTTP/2 headers. An attacker could possibly use this issue to cause a denial of service via memory exhaustion...

ESAPI__esapi-java-legacy_CVE-2022-23457_2-2-3-1

Enterprise Security API для Java Legacy OWASP® ESAPI The OWASP Enterprise Security API — это бесплатная библиотека с открытым исходным кодом для контроля безопасности веб-приложений, которая упрощает программистам создание приложений с меньшим риском. Библиотека ESAPI для Java предназначена для...

Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 1.0)

Summary Vulnerabilities identified in IBM Cloud Pak for Data System Yosemite 1.0 - NRS have been addressed in version 3.0.5.4 Vulnerability Details CVEID:CVE-2026-62574 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Ja...

CVE-2026-98371

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix runt reassembly panic from short inner totlen When the start of an inner packet is split across two outer packets such that fewer than 4 bytes land at the end of the first one, inputprocesspayload saves those byt...

DEBIAN-CVE-2026-98371

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix runt reassembly panic from short inner totlen When the start of an inner packet is split across two outer packets such that fewer than 4 bytes land at the end of the first one, inputprocesspayload saves those byt...

CVE-2026-98310

In the Linux kernel, the following vulnerability has been resolved: drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory xeshrinkerwalk walks the SYSTEM and TT LRUs without a runtime PM reference. Shrinking a bo outside system memory invalidates its GPU mappings, which needs...

DEBIAN-CVE-2026-98310

In the Linux kernel, the following vulnerability has been resolved: drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory xeshrinkerwalk walks the SYSTEM and TT LRUs without a runtime PM reference. Shrinking a bo outside system memory invalidates its GPU mappings, which needs...