cilium v1.20.1

.. raw:: html |cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces| Cilium is a networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span...

frp v0.71.0

frp README | 中文文档 Sponsors frp is an open source project with its ongoing development made possible entirely by the support of our awesome sponsors. If you'd like to join them, please consider sponsoring frp's development. Gold Sponsors The complete IDE crafted for professional Go developers The...

Exploit for CVE-2026-82222

CVE-2026-82222 — GiveWP Marker-Only RCE Validation Lab Privat...

Updated golang packages fix security vulnerabilities

CVE-2026-56865 A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. CVE-2026-56864 A malicious GOSUMDB was capable of serving arbitrary...

MGASA-2026-0341 Updated golang packages fix security vulnerabilities

CVE-2026-56865 A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. CVE-2026-56864 A malicious GOSUMDB was capable of serving arbitrary...

OESA-2026-3549 cifs-utils security update

The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux. Security Fixes: A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in...

OESA-2026-3548 cifs-utils security update

The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux. Security Fixes: A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in...

OESA-2026-3532 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: uaccess: fix integer overflow on accessok Three architectures check the end of a user access against the address limit without taking a possible overflow into...

MAL-2026-15590 Malicious code in com.db.autobahn.notification-center-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae376efc666d8e07f356f9f3cbafe2dfc99e221a150ff96548db4a2b91bb452 package.json declares preinstall and postinstall lifecycle scripts that automatically run curl on npm install to send installer identity whoami,...

Malicious code in com.db.autobahn.notification-center-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae376efc666d8e07f356f9f3cbafe2dfc99e221a150ff96548db4a2b91bb452 package.json declares preinstall and postinstall lifecycle scripts that automatically run curl on npm install to send installer identity whoami,...

PT-2026-83569

Name of the Vulnerable Software and Affected Versions WWBN AVideo affected versions not specified Description An unauthenticated credential submission issue exists in the 'plugin/Live/api/preauthorize.json.php' endpoint. The system accepts credentials via the GET method without implementing rate...

openSUSE 16 Security Update : broot (openSUSE-SU-2026:21675-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21675-1 advisory. Changes in broot: - v1.59.0 CVE-2026-72847 boo1275994 new shellcommand verb attribute: run a command through a shell sh -c / cmd /C so &&, ; and pipes...

SPIP Autosave Session Unauthenticated RCE

This module exploits an unauthenticated RCE in SPIP use exploit/multi/http/spip/autosaverce msf undefinedautosaverce show actions ...actions... msf undefinedautosaverce set ACTION msf undefinedautosaverce show options ...show and set options... msf undefinedautosaverce run This module requires...

chisel v1.12.0

Chisel Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. Single executable including both client and server. Written in Go golang. Chisel is mainly useful for passing through firewalls, though it can also be used to provide a secure endpoint into your network. Table of...

Improper Handling of Length Parameter Inconsistency

Overview resolv is a Thread-aware DNS resolver library in Ruby. Affected versions of this package are vulnerable to Improper Handling of Length Parameter Inconsistency via Resolv::DNS::MessageEncoderputstring, putlabel, and Resolv::DNS::Name.create in lib/resolv.rb. An attacker can make an...

Oracle Forms & Reports RCE (CVE-2012-3152 & CVE-2012-3153)

An unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Report Server Component. id: CVE-2012-3153 info: name: Oracle Forms &...

Zoho manageengine - Cross-Site Scripting

Zoho manageengine is vulnerable to reflected cross-site scripting. This impacts Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 via the...

PAN-OS Management Interface - Path Confusion to Authentication Bypass

A vulnerability in PAN-OS management interface allows authentication bypass through path confusion between Nginx and Apache handlers.The issue occurs due to differences in path processing between Nginx and Apache, where double URL encoding combined with directory traversal can bypass authenticati...

Windows Server 2003 & IIS 6.0 - Remote Code Execution

Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in the ScStoragePathFromUrl function in the WebDAV service that could allow remote attackers to execute arbitrary code via a long header beginning with "If http://" in a PROPFIND...

Grafana 3.0.1-7.0.1 - Server-Side Request Forgery

Grafana 3.0.1 through 7.0.1 is susceptible to server-side request forgery via the avatar feature, which can lead to remote code execution. Any unauthenticated user/client can make Grafana send HTTP requests to any URL and return its result. This can be used to gain information about the network...