PT-2026-116647

A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function read metadata from safetensors of the file modules/sd models.py of the component Extra-Networks Card Builder. Such manipulation of the argument metadata .sshs model...

PT-2026-116627

A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the function read metadata from safetensors of the file modules/sd models.py of the component Metadata Extraction. The manipulation of the argument header length field results in allocation of resources. ...

django-import-export 4.4.1 Integer Conversion Denial of Service

django-import-export versions 2.7.0 through 4.4.1 contain an uncontrolled resource consumption issue in IntegerWidget.clean. A staff user able to import data can submit scientific-notation integer input that consumes CPU time during conversion. https://packetstorm.news/download/236158...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc (CENTOS8.5:CLSA-2022:1666277963)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2022:1666277963 advisory. - A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content...

Apache Tomcat 11.0.22 Examples Cross Site Scripting

Apache Tomcat versions through 11.0.22 contain a cross site scripting issue in the Number Guess example. The supplied proof of concept scanner tests this issue and CVE-2022-34305 in the Examples web application. https://packetstorm.news/download/236150...

go-git 5.19.1 Reference Name Path Traversal

go-git version 5.19.1 contains a path traversal issue in filesystem-backed loose-reference storage. This proof of concept safely demonstrates a crafted reference name overwriting a temporary .git/config file. https://packetstorm.news/download/236148...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2024:1705927642)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2024:1705927642 advisory. - It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free...

PT-2026-116544

A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injection. The attack requires a local approach. The reported GitHub...

PT-2026-117163

A vulnerability has been found in diem-project diem up to 5.1.3. This affects an unknown part of the file lib/model/doctrine/PluginDmUser.class.php of the component SHA1 Handler. Such manipulation of the argument salt/password leads to password hash with insufficient computational effort. The...

PT-2026-116813

In the Linux kernel, the following vulnerability has been resolved: tg3: clean up PHYLIB resources on probe failure tg3 get invariants can register an MDIO bus and connect a PHY for USE PHYLIB devices. If tg3 init one later fails, its common error path releases the mappings and netdev without...

PT-2026-117001

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix ovl adaptor platform device leak mtk drm probe creates an OVL adaptor platform device with platform device register data when the display pipeline requires the OVL adaptor. If a later initialization step fails,...

Debian dsa-6570 : haproxy - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6570 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6570-1 [email protected] https://www.debian.org/security/...

Linux Distros Unpatched Vulnerability : CVE-2026-98670

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind The ZYNQ XADC alarm IRQ handler queues zynqunmaskwork via scheduledelayedwork...

Security update for pgvector (important)

openSUSE security update: security update for pgvector ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22065-1 Rating: important References: bsc1284129 Cross-References: CVE-2026-103484 CVSS scores: CVE-2026-103484 SUSE : 8.8...

Security update for perl-XS-Parse-Keyword (important)

openSUSE security update: security update for perl-xs-parse-keyword ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22101-1 Rating: important References: bsc1283247 Cross-References: CVE-2026-85644 CVSS scores: CVE-2026-85644 SUSE : 8.1...

SUSE CVE-2026-46471

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparseuuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents...

SUSE CVE-2026-46472

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparsechnl function may read past the end of a global array, potentially leading to information disclosure...

CVE-2023-42362

CVE-2023-42362 Author: Abdelrahman Mohamed Mr-n0b3dy Linked-in: https://www.linkedin.com/in/abdelrhman-mohamed-ashraf-7bb43410b/ Vulnerability Name: Unrestricted File Upload that led to ATO Severity: High Product: NCR teller web app Version: 4.4.0 Description: The Unrestricted File Upload leading...

CVE-2026-111866 nemoTyrant manong func.php arr2sql sql injection

A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/delcache/arr2sql of the file func.php. This manipulation causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to...

CVE-2026-111866

A SQL injection vulnerability exists in nemoTyrant manong affecting the cache/del_cache/arr2sql function within the func.php file. An attacker may initiate this attack remotely to manipulate the database. Due to a rolling release model, specific affected version numbers are not provided, though t...