CVE-2025-65318-and-CVE-2025-65319

PoC for CVE-2025-65318 and CVE-2025-65319 CVE-2025-65318 BDU:2025-13740: When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms of bo...

doggie

Descripción general del proyecto Doggie y evilDoggie Doggie es un proyecto modular de código abierto diseñado para construir un adaptador CAN Bus a serial USB, BLE, UART casero. Conecta tu computadora a una red CAN Bus mediante el protocolo slcan CAN sobre Serial para compatibilidad con...

Vision-MSI-Thermal-Control

Vision MSI Thermal Control MSI Modern 15H AI C1MG-096IT Linux thermal management - Reverse engineered EC control with fan profiles and battery threshold 🎯 Purpose of this Project This application was born out of necessity for MSI laptop users on Linux. The journey began when I discovered that...

PT-2026-110477

SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value. Data could not be modified. Flock identified the issue...

PT-2026-110487

A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory. This may allow files accessible to the OTRS application process to be deleted. The vulnerability does not bypass operating syste...

Rocky Linux 8.6 [CIQ] Security Update: libksba / libksba-devel (ciqsa-2026_1603)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261603 advisory. This advisory aggregates security fixes for the libksba SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2022-3515. Tenable has extracted the preceding description...

Rocky Linux 9.6 [CIQ] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ciqsa-2026_1635)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261635 advisory. This advisory aggregates security fixes for the openssl SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2024-12797. Tenable has extracted the preceding description...

Rocky Linux 9.2 [CIQ] Security Update: fapolicyd / fapolicyd-selinux (ciqsa-2026_1614)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261614 advisory. This advisory aggregates security fixes for the fapolicyd SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2022-1117. Tenable has extracted the preceding description...

PT-2026-110480

In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched cache group from mm to fix UAF Currently the sched cache grouping is by mm and the scheduling statistics sched cache stat lives in the mm structure. This ties the life cycle of scheduling stats with mm...

PT-2026-110491

OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser backends. When multiple backends, such as a database and LDAP, are configured, the uniqueness check for customer user email addresses is performed only within the selected backend...

Rocky Linux 9 [CIQ] Security Update: mod_auth_openidc / mod_auth_openidc-debuginfo / etc (crlsa-2026_79177)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202679177 advisory. modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsing CVE-2026-54789 Tenable has extracted the preceding description block directly...

PT-2026-110492

User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by authenticated users or received through external communication channels such as email, may be stored in fields that are later included in CSV...

PT-2026-110485

An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery CSRF attack. The OTRS AdminImportExport::TemplateDelete action does not validate the request's ChallengeToken, allowing an unauthenticated remote attacker to craft a...

AlmaLinux 9.6 [TuxCare] Security Update: mariadb-connector-c / mariadb-connector-c-config / etc (ALMALINUX9.6:CLSA-2026:1791796759)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791796759 advisory. - MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated us...

RHEL 9 : gimp (RHSA-2026:80509)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:80509 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

Rocky Linux 8.6 [CIQ] Security Update: chkrootkit (ciqsa-2026_1594)

The Rocky Linux 8.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261594 advisory. This advisory aggregates security fixes for the chkrootkit SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2014-0476. Tenable has extracted the preceding description...

Rocky Linux 9.6 [CIQ] Security Update: fapolicyd / fapolicyd-selinux (ciqsa-2026_1630)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261630 advisory. This advisory aggregates security fixes for the fapolicyd SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2022-1117. Tenable has extracted the preceding description...

Rocky Linux 9.2 [CIQ] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ciqsa-2026_1617)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261617 advisory. This advisory aggregates security fixes for the openssl SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2025-15467. Tenable has extracted the preceding description...

Rocky Linux 9.6 [TuxCare] Security Update: perl-DBI (ALMALINUX9.6:CLSA-2026:1791807966)

"The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791807966 advisory. - DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sqltypecastsvpv. When casting to SQLNUMERIC,...

Rocky Linux 8.6 [CIQ] Security Update: texlive / texlive-adjustbox / texlive-ae / texlive-algorithms / etc (ciqsa-2026_1610)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261610 advisory. This advisory aggregates security fixes for the texlive SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2018-17407. Tenable has extracted the preceding description...