Electron encryption issue vulnerability

Versions prior to Electron 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6 contain an encryption vulnerability. This vulnerability arises from the failure to block compromised intermediate certificates in Chromium networking, Node.js TLS, Node.js HTTPS, or Node.js Fetch, allowing attackers possessing...

Exploit for CVE-2026-111943

ca-trust-audit Urgent trust audit: eMudhra intermediate CA...

OESA-2026-4522 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, createredirectclient removes Host, Proxy-Authorization, and Authorizatio...

Vulnerabilities in Oracle JD Edwards EnterpriseOne

Oracle has identified several vulnerabilities in Oracle JD Edwards EnterpriseOne Tools, specifically in versions 9.2.0.0 through 9.2.26.5. These vulnerabilities allow attackers to gain access to the system using various network protocols such as HTTP, HTTPS, and SMTP, either without authenticatio...

CLEANSTART-2026-PJ95913 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

RLSA-2026:85929 Important: python3.12-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python3.12-urllib3 security update

An update is available for python3.12-urllib3. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

Oracle Identity Manager (October 2026 CPU)

The 12.2.1.4.0 and 14.1.2.1.0 versions of Identity Manager installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: End User Self Service...

Fedora 43 : bind9-next (2026-d47a436e71)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d47a436e71 advisory. Update to 9.21.26 rhbz2489832 Security Fixes: - Prevent excessive CPU use validating crafted DNSSEC responses. CVE-2026-19668 - Require a TSIG on...

WS-2026-0174

Electron before 42.11.16, 43.0.0-alpha.1 through 43.8.0, 44.0.0-alpha.1 through 44.9.0, and 45.0.0-alpha.1 through 45.0.0-beta.5 trust TLS chains that pass through the compromised eMudhra emSign intermediate CAs, in both Chromium networking and Node.js tls/https/fetch. An attacker holding a...

Rocky Linux 9 [CIQ] Security Update: python3.12-urllib3 Multiple Vulnerabilities (crlsa-2026_85929)

The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202685929 advisory. urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser CVE-2026-97689 urllib3: urllib3: Traffic interception via HTTPS proxy...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Response Inspector A lightweight Python HTTP/HTTPS...

USN-8890-2 libsoup3 vulnerabilities

USN-8890-1 fixed vulnerabilities in libsoup. This update provides the corresponding updates for libsoup3 on Ubuntu 26.10. Original advisory details: It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of...

PCLPoC

PCL2 notice.json RCE PoC In-house test This tool is onl...

CLEANSTART-2026-PY41219 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

EUVD-2026-106768

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle SOA Suite...

EUVD-2026-106763

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle BI Publisher. Successful...

EUVD-2026-106591

Vulnerability in the iProcurement product of Oracle E-Business Suite component: Internal operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise iProcurement. Successful...

EUVD-2026-106570

Vulnerability in the iProcurement product of Oracle E-Business Suite component: E-Content Manager Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise iProcurement. Successful...

EUVD-2026-106563

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Interoperability SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise JD Edwards...