jsch jsch-2.28.7

Fork of JSch-0.1.55 See original README Why should you use this library? As I explained in a blog post the main points are: OpenSSH has disabled ssh-rsa in release 8.8 per default and you need a library which supports rsa-sha2-256 and rsa-sha2-512. Drop in replacement: just change dependency...

open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder

A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a vulnerability due to Apache Commons HttpClient

Summary Apache Commons HttpClient is used by IBM Integrated Analytics System as an HTTP client library. CVE-2012-5783 affects Apache Commons HttpClient 3.1 due to improper SSL certificate hostname verification. The library fails to verify that the server hostname matches the domain name in the...

CVE-2026-15366

A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page...

CVE-2026-15366

A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page...

CVE-2026-15366

A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page...

CVE-2026-15366

A control logic defect in a specific built-in webpage of Kids Mode on vivo devices allows users to view local gallery photos directly within that page. The vulnerability is scored CVSS 4.0 base 2.4 (LOW) with a physical attack vector , indicating proximity access is required and no privileges or ...

EUVD-2026-66197

Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affects Edit in-place field versions: from 0.0.0 to 2.1.1...

PT-2026-82229

Name of the Vulnerable Software and Affected Versions CTFd version 3.7.6 Description CTFd is susceptible to a man-in-the-middle attack, which occurs when an attacker intercepts and potentially alters communication between two parties who believe they are communicating directly with each other...

CVE-2025-29419

CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack...

CVE-2026-75330

The front-end interface /superdiamond/preview/projectCode/module/type of super-diamond-server = 1.3.3 is vulnerable to SQL injection. The module parameter is directly concatenated into the SQL IN clause through StringUtils.split and string concatenation without being parameterized and bound...

CVE-2026-75330

The super-diamond-server software (versions prior to 1.3.4 ) is vulnerable to SQL injection within the front-end interface /superdiamond/preview/{projectCode}/{module}/{type}. The root cause is the direct concatenation of the module parameter into a SQL IN clause using StringUtils.split() and str...

Linux Distros Unpatched Vulnerability : CVE-2026-74750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: defer key slot crypto freeing to workqueue Key slots are released through a kref and the existing release path frees the AEAD transforms from an RCU...

CVE-2025-29419: Channel Accessible by Non-Endpoint

CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack...

CVE-2026-54548: Improper Certificate Validation

kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...

PT-2026-81973

Name of the Vulnerable Software and Affected Versions Kids Mode affected versions not specified Description A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page. Recommendations At the moment, there is no information...

PT-2026-82335

Name of the Vulnerable Software and Affected Versions super-diamond-server versions prior to 1.3.4 Description The front-end interface '/superdiamond/preview/projectCode/module/type' is susceptible to SQL injection. This occurs because the module parameter is directly concatenated into a SQL IN...

CVE-2025-29419

CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack...

CVE-2025-29419

The software CTFd v3.7.6 is vulnerable to a man-in-the-middle attack . While the specific root cause and technical components involved are not detailed in the provided documents, the vulnerability was assigned a High base severity score of 7.1 . No remediation steps, exploit details, or specific ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093315 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Audit Plug-in. Supported versions that are affected are 5.7.25 and prior and 8.0.15...