Exploit for Missing Authentication for Critical Function in Cpanel

cPanelSniper CVE-2026-41940 — c...

Exploit for Unrestricted Upload of File with Dangerous Type in Filemanagerpro File_Manager

wp-file-manager-exploit-CVE-2020-25213-with-Zerologon Project...

MAL-2026-3420 Malicious code in noon-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2a4c1ac3896b7769b47ab6659bf7b0d49f229963c910d0c9b9be11c5291c12 The package noon-contracts was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in erslove (npm)

erslove is a typosquatting package impersonating resolve, the module resolution library implementing require.resolve semantics. The package bundles the legitimate resolve source and test fixtures to appear functional while hiding a credential-theft payload in index1.js, executed at install time v...

Exploit for Unrestricted Upload of File with Dangerous Type in Zohocorp Manageengine_Applications_Manager

CVE-2020-14008 - ManageEngine Applications Manager RCE Authen...

drm/amd/display: Fix dsc eDP issue

...

cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

cPanel has released updates to address three vulnerabilities in cPanel and Web Host Manager WHM that could be exploited to achieve privilege escalation, code execution, and denial-of-service. The list of vulnerabilities is as follows - CVE-2026-29201 CVSS score: 4.3 - An insufficient input...

CVE-2026-42069 Kirby: Read access to site, user and role information is not gated by permissions

Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, read access to site, user and role information is not gated by permissions. This issue has been patched in versions 4.9.0 and 5.4.0...

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-directconnect, dex, kubernetes-ingress-defaultbackend-fips, net-kourier-fips, kubo, task-fips, crossplane-provider-azure-alertsmanagement, etcd-fips, hubble, crossplane-provider-azure-portal, image-factory-fips, crossplane-provider-aws-ram-fip...

CVE-2026-39819 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-directconnect, dex, kubernetes-ingress-defaultbackend-fips, net-kourier-fips, kubo, task-fips, crossplane-provider-azure-alertsmanagement, etcd-fips, hubble, crossplane-provider-azure-portal, image-factory-fips, crossplane-provider-aws-ram-fip...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-directconnect, dex, kubernetes-ingress-defaultbackend-fips, net-kourier-fips, kubo, task-fips, crossplane-provider-azure-alertsmanagement, etcd-fips, hubble, crossplane-provider-azure-portal, image-factory-fips, crossplane-provider-aws-ram-fip...

GHSA-497X-JCXF-M478 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-directconnect, dex, net-kourier-fips, kubo, vault-secrets-webhook, crossplane-provider-azure-alertsmanagement, etcd-fips, hubble, crossplane-provider-azure-portal, image-factory-fips, crossplane-provider-aws-ram-fips, cluster-api-fips,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-directconnect, dex, kubernetes-ingress-defaultbackend-fips, net-kourier-fips, kubo, task-fips, crossplane-provider-azure-alertsmanagement, etcd-fips, hubble, crossplane-provider-azure-portal, image-factory-fips, crossplane-provider-aws-ram-fip...

GHSA-QC64-M6C2-V4X7 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-directconnect, dex, kubernetes-ingress-defaultbackend-fips, net-kourier-fips, kubo, task-fips, crossplane-provider-azure-alertsmanagement, etcd-fips, hubble, crossplane-provider-azure-portal, image-factory-fips, crossplane-provider-aws-ram-fip...

GHSA-8G2R-HHVJ-MV99 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-directconnect, dex, kubernetes-ingress-defaultbackend-fips, net-kourier-fips, kubo, vault-secrets-webhook, crossplane-provider-azure-alertsmanagement, etcd-fips, hubble, crossplane-provider-azure-portal, image-factory-fips,...

GHSA-5M4P-2GJX-P2G8 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-directconnect, dex, kubernetes-ingress-defaultbackend-fips, net-kourier-fips, kubo, task-fips, crossplane-provider-azure-alertsmanagement, etcd-fips, hubble, crossplane-provider-azure-portal, image-factory-fips, crossplane-provider-aws-ram-fip...

CVE-2026-33811 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-directconnect, dex, net-kourier-fips, kubo, vault-secrets-webhook, crossplane-provider-azure-alertsmanagement, etcd-fips, hubble, crossplane-provider-azure-portal, image-factory-fips, crossplane-provider-aws-ram-fips, cluster-api-fips,...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-directconnect, dex, kubernetes-ingress-defaultbackend-fips, net-kourier-fips, kubo, vault-secrets-webhook, crossplane-provider-azure-alertsmanagement, etcd-fips, hubble, crossplane-provider-azure-portal, image-factory-fips,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: newrelic-infra-operator, image-factory-fips, crossplane-provider-azure-portal, crossplane-provider-aws-ram-fips, dockerize-fips, coredns, crossplane-provider-aws-sns, moby-ryuk, cert-manager-cmctl-fips, bank-vaults, grafana-rollout-operator-fips,...

Unity Linux 20.1050e / 20.1070e Security Update: kubernetes (UTSA-2026-017342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017342 advisory. A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows...