CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: wildfly, celeborn, strimzi-kafka-oauth, akhq, sonarqube, jenkins-plugin-manager, gradle, opensearch, dependency-track, thingsboard, strimzi-kafka-operator, tez, druid, management-api-for-apache-cassandra-5.0, keycloak-config-cli, cassandra, spdx-tools-java, neo4j,...

GO-2026-6596 vulnerabilities

Vulnerabilities for packages: hubble-ui, kubescape-operator, hubble, kubescape, cilium...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: tigera-operator, helm-set-status, k9s, cluster-api-helm-controller, gitness, kargo, helm-mapkubeapis, manifest-tool, rancher-helm, helm-push, opentofu, xeol, kyverno-notation-aws, flux-helm-controller, maru, k8sgpt, kube-arangodb, cert-manager-cmctl...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: tigera-operator, helm-set-status, k9s, cluster-api-helm-controller, gitness, kargo, helm-mapkubeapis, manifest-tool, rancher-helm, helm-push, opentofu, xeol, kyverno-notation-aws, flux-helm-controller, maru, k8sgpt, kube-arangodb, cert-manager-cmctl...

GO-2026-6597 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kaniko, kargo, scorecard, dagger, trivy, rancher-helm, zarf, headlamp, k8sgpt, kube-arangodb, rancher, newrelic-infrastructure-agent, grype, k9s, cluster-api-helm-controller, neuvector-scanner, gatekeeper, wolfictl, xeol, rancher-agent, k3s,...

GO-2026-6505 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, k8sgateway, promxy, kiali, etcd, openbao, flux-image-automation-controller, falcoctl, opencost, opentofu, thanos, terraform, dex, kafka-proxy, kubernetes-csi-node-driver-registrar, prometheus-adapter, rancher, dagdotdev, kube-vip-cloud-provider,...

CVE-2026-104055 Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

EUVD-2026-91803

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2026-104055 Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2026-104055

The postgresql-operator charm contains a vulnerability where the Prometheus postgres_exporter writes the monitoring user's password in cleartext to its logs during database connection errors. An attacker with log-reading permissions can recover this password to gain read-only pg_monitor access to...

CVE-2026-104055 Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2025-67887

🛡️ 针对 1C-Битрикс 的 "漏洞" CVE-2025-67887/86 在 перевод 模块中的修复 1С-Битрикс 安全 1С-Битрикс 信息安全与事件监控中心通知 Telegram 频道中出现了一条关于 "Перевод" 模块存在漏洞的消息，据称该漏洞允许未经授权上传档案且不进行安全检查。 我们立即进行了检查，并且 不确认 产品中存在漏洞。只有管理员才能向 "Переводы" 模块上传文件。消息中提到的所需权限与管理员的权限一致。管理员有权修改并在项目上运行任何代码。 因此，该漏洞不存在。 https://t.me/bitrixkiberbez/76...

Security Bulletin: User Entity Behavior Analytics App for IBM QRadar SIEM contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. User Entity Behavior Analytics App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2011-4969 DESCRIPTION:...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for September 2026.

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation released in September 2026. Vulnerability Details CVEID:CVE-2025-71329 DESCRIPTION: image-size through 2.0.2 contains a denial of...

Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign

Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor. The activity, which has targeted government and policy organizations in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar, involves the...

TornadoRevC2

TornadoRevC2 A lightweight, modular post-exploitation framework for authorized security research, red-team operations, and penetration testing. TornadoRevC2 manages interactive reverse shell and bind shell sessions on Linux and Windows hosts through a unified operator console, across plain TCP,...

Exploit for Argument Injection in Thecodingmachine Gotenberg

CVE-2026-40281 Gotenberg --- 📖 Table of...

cdn-ip-scanner

CDN IP Scanner V2.0 Alta Precisión • Ultra Rápido • Impulsado por IA English • فارسی • Download • Donate 🇬🇧 English ¿Qué es CDN IP Scanner? CDN IP Scanner es una potente herramienta basada en web para escanear y encontrar las direcciones IP de CDN Red de Entrega de Contenido más rápidas. Ayuda a...

cve-2026-61732-lab

CVE-2026-61732 — Decepticon ChatML role-boundary forgery lab A self-contained, disposable lab that reproduces GHSA-g5f9-3xfg-p9mf / CVE-2026-61732: Decepticon , an autonomous red-team agent, wrapped web-crawl output into LLM messages without neutralizing ChatML special-token literals. On a...

Security Bulletin: Multiple Vulnerabilities in IBM CloudPak System

Summary Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-29074 DESCRIPTION: SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 2.1.0 to before version 2.8.1,...