GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: logstash, druid, thingsboard, sonarqube, management-api-for-apache-cassandra-5.0, celeborn, cassandra, wildfly, cassandra-reaper, wavefront-proxy, cass-config-builder, akhq, tez, spdx-tools-java, opensearch, dependency-track, strimzi-kafka-operator,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: logstash, druid, thingsboard, sonarqube, management-api-for-apache-cassandra-5.0, celeborn, cassandra, wildfly, cassandra-reaper, wavefront-proxy, cass-config-builder, akhq, tez, spdx-tools-java, opensearch, dependency-track, strimzi-kafka-operator,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: logstash, druid, thingsboard, sonarqube, management-api-for-apache-cassandra-5.0, celeborn, cassandra, wildfly, cassandra-reaper, wavefront-proxy, cass-config-builder, akhq, tez, spdx-tools-java, opensearch, dependency-track, strimzi-kafka-operator,...

GO-2026-6596 vulnerabilities

Vulnerabilities for packages: cilium, hubble-ui, kubescape-operator, hubble, kubescape...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: helm-set-status, helm-push, gitness, manifest-tool, k9s, cluster-api-helm-controller, kargo, kyverno-notation-aws, opentofu, xeol, cert-manager-cmctl, k8sgpt, kube-arangodb, flux-helm-controller, tigera-operator, rancher-helm, maru, helm-mapkubeapis...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: helm-set-status, helm-push, gitness, manifest-tool, k9s, cluster-api-helm-controller, kargo, kyverno-notation-aws, opentofu, xeol, cert-manager-cmctl, k8sgpt, kube-arangodb, flux-helm-controller, tigera-operator, rancher-helm, maru, helm-mapkubeapis...

GO-2026-6597 vulnerabilities

Vulnerabilities for packages: zot, k9s, xeol, kargo, helm-operator, kaniko, neuvector-scanner, steampipe, docker-cli-buildx, headlamp, helm-push, chartmuseum, nerdctl, dagger, cluster-api-helm-controller, trivy, k3s, k8sgpt, scorecard, helm-set-status, falco-no-driver, trivy-operator, docker,...

GO-2026-6505 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, grafana-mimir, k6, kubernetes-csi-external-provisioner, temporal, cortex, gitness, ferretdb, kubernetes-event-exporter, kwok, istio, helm-operator, kaniko, gogatekeeper, crossplane-provider-keycloak, cluster-api, guac, harbor-registry, kubeflo...

CVE-2026-104055 Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2026-104055

The postgresql-operator charm contains a vulnerability where the Prometheus postgres_exporter writes the monitoring user's password in cleartext to its logs during database connection errors. An attacker with log-reading permissions can recover this password to gain read-only pg_monitor access to...

CVE-2026-104055 Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2026-104055 Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

EUVD-2026-91803

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2025-67887

🛡️ Исправление для "уязвимости" CVE-2025-67887/86 в модуле Translate 1C-Битрикс 1С-Битрикс Безопасность Центр информационной безопасности и мониторинга инцидентов компании «1С-Битрикс» информирует В Telegram-каналах появилась информация о наличии уязвимости в модуле "Перевод", якобы позволяющей...

Security Bulletin: User Entity Behavior Analytics App for IBM QRadar SIEM contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. User Entity Behavior Analytics App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2011-4969 DESCRIPTION:...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for September 2026.

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation released in September 2026. Vulnerability Details CVEID:CVE-2025-71329 DESCRIPTION: image-size through 2.0.2 contains a denial of...

Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign

Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor. The activity, which has targeted government and policy organizations in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar, involves the...

TornadoRevC2

TornadoRevC2 A lightweight, modular post-exploitation framework for authorized security research, red-team operations, and penetration testing. TornadoRevC2 manages interactive reverse shell and bind shell sessions on Linux and Windows hosts through a unified operator console, across plain TCP,...

Exploit for Argument Injection in Thecodingmachine Gotenberg

CVE-2026-40281 Gotenberg --- 📖 Table of...

cdn-ip-scanner

CDN IP Scanner V2.0 Высокая точность • Сверхбыстрый • На базе ИИ English • فارسی • Download • Donate 🇬🇧 English Что такое CDN IP Scanner? CDN IP Scanner — это мощный веб-инструмент для сканирования и поиска самых быстрых IP-адресов CDN сети доставки контента. Он помогает пользователям находить...