1155944 matches found
RHEL 8 : freerdp (RHSA-2026:46389)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:46389 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...
Fedora 44 : trafficserver (2026-bb8dc1e5b6)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-bb8dc1e5b6 advisory. Resolves CVE-2026-59173 - DoS vulnerability in HTTP/2 via stalled flow-control Additional Changes with Apache Traffic Server 9.2.14 12910 - Fix...
MulRobBench: A Decision-Level Benchmark for Safe and Security-Policy-Compliant Multimodal UAV Agents
Smart-city airspace is transforming Uncrewed Aerial Vehicles UAVs from passive sensing platforms into cyber-physical decision makers that must follow operational rules under degraded observations and ambiguous language. Existing UAV and multimodal benchmarks evaluate perception, navigation,...
GHSA-JPCW-4WR7-C3VQ vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-web, crossplane-provider-aws-codeguruprofiler-fips, crossplane-provider-aws-fis, crossplane-provider-azure-authorization, crossplane-provider-aws-globalaccelerator-fips, crossplane-provider-aws-kendra-fips, crossplane-provider-family-aws,...
GHSA-R277-6W6Q-XMQW vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-web, crossplane-provider-aws-codeguruprofiler-fips, crossplane-provider-aws-fis, crossplane-provider-azure-authorization, crossplane-provider-aws-globalaccelerator-fips, crossplane-provider-aws-kendra-fips, crossplane-provider-family-aws,...
GHSA-XX22-P4CH-683R vulnerabilities
Vulnerabilities for packages: wildfly, debezium, sonarqube, confluent-kafka, debezium-connector-informix, akhq, spark, cassandra, debezium-connector-ibmi, debezium-connector-vitess, debezium-connector-spanner, thingsboard, apache-nifi, debezium-connector-db2, apicurio-registry, cassandra-reaper,...
CVE-2026-59949 vulnerabilities
Vulnerabilities for packages: wildfly, debezium, sonarqube, confluent-kafka, debezium-connector-informix, akhq, spark, cassandra, debezium-connector-ibmi, debezium-connector-vitess, debezium-connector-spanner, thingsboard, apache-nifi, debezium-connector-db2, apicurio-registry, cassandra-reaper,...
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: kwok, istio, kubescape, cluster-api-provider-vsphere, k3s, rke2-cloud-provider, calico, kuma, fluent-operator, cluster-api-aws-controller, zot, flux-helm-controller, kubernetes-csi-external-resizer, cert-manager-istio-csr, opentelemetry-operator, cluster-autoscaler,...
Malicious code in wsh4_edu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0757eee7b6324baca2e2b28261c7ff072c60d578c827a14c1fa54f690b1cd53a The package's postinstall hook runs index.js, which POSTs the installer's absolute filesystem path via filename with sendFullPath: true, Node.js...
MAL-2026-11072 Malicious code in wsh4_edu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0757eee7b6324baca2e2b28261c7ff072c60d578c827a14c1fa54f690b1cd53a The package's postinstall hook runs index.js, which POSTs the installer's absolute filesystem path via filename with sendFullPath: true, Node.js...
CVE-2026-59949 vulnerabilities
Vulnerabilities for packages: debezium-connector-informix, opensearch, kafka, opensearch-fips, apache-pulsar, kafka-fips, spark-kubernetes-operator-fips, debezium-connector-db2, sonarqube, druid, dependency-track-apiserver, traccar-fips, commercial-elasticsearch, conductor-fips, cassandra,...
GHSA-XX22-P4CH-683R vulnerabilities
Vulnerabilities for packages: debezium-connector-informix, opensearch, kafka, opensearch-fips, apache-pulsar, kafka-fips, spark-kubernetes-operator-fips, debezium-connector-db2, sonarqube, druid, dependency-track-apiserver, traccar-fips, commercial-elasticsearch, conductor-fips, cassandra,...
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: kueue, metallb-fips, calico-fips, cloud-provider-gcp-cloud-controller-manager-fips, crossplane-function-auto-ready, kubernetes-csi-external-resizer, commercial-grafana, open-cluster-management-fips, gitlab-kas-fips, external-secrets-fips, nginx-kubernetes-ingress-fip...
Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on any self-managed 18.11.3 server that has not taken the update. Any authenticated user who can push to a project can run it...
DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts
The operators of the DevMan ransomware-as-a-service RaaS scheme are maintaining a dedicated web platform that offers affiliates the ability to build payloads, oversee earnings, and manage various aspects related to victims. Swiss cybersecurity company PRODAFT is tracking the centrally administere...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
🚀 CVE-2026-31431 – Advanced Linux Kernel Exploit "From...
JLSEC-2026-795 Hugo: security.http.urls allow-list bypass via HTTP redirects
Commit: 86fbb0f7a8 — security: Validate redirects against security.http.urls Affected versions: v0.91.0 when security.http.urls was introduced through v0.161.1. Fixed in: v0.162.0. Severity: Only relevant for sites that rely on security.http.urls as a trust boundary — e.g. CI builds that fetch...
CVE-2026-54696 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...