[SECURITY] Fedora 44 Update: python3.14-3.14.3-2.fc44

Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...

[SECURITY] Fedora 44 Update: insight-18.0.50.20260306-2.fc44

Insight is a tight graphical user interface to GDB written in Tcl/Tk. It provides a comprehensive interface that enables users to harness most of GDB's power. It's also probably the only up-to-date UI for the latest GDB version...

CVE-2026-34373 Parse Server: GraphQL API endpoint ignores CORS origin restriction

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.66 and 9.7.0-alpha.10, the GraphQL API endpoint does not respect the allowOrigin server option and unconditionally allows cross-origin requests from any website. This...

Exploit for CVE-2026-0848

CVE-2026-0848 - NLTK StanfordSegmenter RCE PoC ⚠️ ADVERTEN...

EUVD-2026-17399

A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login. This manipulation of the argument username/password causes sql injection. Remote exploitation of the attack is...

EUVD-2026-17349

SQL inyection SQLi vulnerability in Umami Software web application through an improperly sanitized parameter, which could allow an authenticated attacker to execute arbitrary SQL commands in the database.Specifically, they could manipulate the value of the 'timezone' request parameter by includin...

CVE-2024-14030

Sereal::Decoder versions from 4.000 through 4.009002 for Perl embeds a vulnerable version of the Zstandard library. Sereal::Decoder embeds a version of the Zstandard zstd library that is vulnerable to CVE-2019-11922. This is a race condition in the one-pass compression functions of Zstandard prio...

CVE-2026-5197

A vulnerability was found in code-projects Student Membership System 1.0. The affected element is an unknown function of the file /deleteuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

EUVD-2026-17351

A vulnerability has been found in code-projects Student Membership System 1.0. Impacted is an unknown function of the file /deletemember.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...

CVE-2026-5195

The CVE-2026-5195 entry concerns code-projects Student Membership System 1.0, specifically the User Registration Handler. The issue is a SQL injection vulnerability exploitable via remote input manipulation. The provided metrics indicate CVSS v3.0/3.1/4.0 scores with high impact on confidentialit...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: kots, crossplane, cerbos, grafana-alloy, kyverno, grype-db, trivy-operator-fips, apko, cg, kaniko-fips, kubevela, xeol-fips, google-osconfig-agent, pulumi-language-dotnet, zot, chezmoi, flux-image-automation-controller, amazon-ssm-agent, xeol, skaffold, packer,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: kots, crossplane, cerbos, grafana-alloy, kyverno, grype-db, trivy-operator-fips, apko, cg, kaniko-fips, kubevela, xeol-fips, google-osconfig-agent, pulumi-language-dotnet, zot, chezmoi, flux-image-automation-controller, amazon-ssm-agent, xeol, skaffold, packer,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: kots, crossplane, cerbos, grafana-alloy, kyverno, grype-db, trivy-operator-fips, apko, cg, kaniko-fips, kubevela, xeol-fips, google-osconfig-agent, pulumi-language-dotnet, zot, chezmoi, flux-image-automation-controller, amazon-ssm-agent, xeol, skaffold, packer,...

CVE-2026-32714

A SQL injection vulnerability was found in the KeyCache component of scitokens. The implementation constructs SQL queries using Python string formatting with user-controlled input such as issuer and key identifiers. An attacker could exploit this flaw by supplying crafted input that alters the...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, gitea, cerbos, kargo, chezmoi, snyk-cli, rancher-fleet, gitaly, scorecard, witness, osv-scanner, gptscript, grafana-alloy, kaniko, trivy-operator, nfpm, kubescape, gomplate, zot, grype, dagger, pulumi-language-java, syft, guac,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, gitea, cerbos, kargo, chezmoi, snyk-cli, rancher-fleet, gitaly, scorecard, witness, osv-scanner, gptscript, grafana-alloy, kaniko, trivy-operator, nfpm, kubescape, gomplate, zot, grype, dagger, pulumi-language-java, syft, guac,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, gitea, cerbos, kargo, chezmoi, snyk-cli, rancher-fleet, gitaly, scorecard, witness, osv-scanner, gptscript, grafana-alloy, kaniko, trivy-operator, nfpm, kubescape, gomplate, zot, grype, dagger, pulumi-language-java, syft, guac,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, gitea, cerbos, kargo, chezmoi, snyk-cli, rancher-fleet, gitaly, scorecard, witness, osv-scanner, gptscript, grafana-alloy, kaniko, trivy-operator, nfpm, kubescape, gomplate, zot, grype, dagger, pulumi-language-java, syft, guac,...

DEBIAN-CVE-2026-34060

Ruby LSP is an implementation of the language server protocol for Ruby. Prior to Shopify.ruby-lsp version 0.10.2 and ruby-lsp version 0.26.9, the rubyLsp.branch VS Code workspace setting was interpolated without sanitization into a generated Gemfile, allowing arbitrary Ruby code execution when a...

CVE-2026-34060

Ruby LSP is an implementation of the language server protocol for Ruby. Prior to Shopify.ruby-lsp version 0.10.2 and ruby-lsp version 0.26.9, the rubyLsp.branch VS Code workspace setting was interpolated without sanitization into a generated Gemfile, allowing arbitrary Ruby code execution when a...