PT-2026-96728

Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description The queryEnrichment function in EventsController.php fails to properly validate the module name parameter. When a module name is provided that is not in the list of enabled modules, the system...

PT-2026-96661

Name of the Vulnerable Software and Affected Versions Live Composer – Free WordPress Website Builder versions prior to 2.1.22 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping within the dslc module downloads output shortcode content...

RockyLinux 10 : rsyslog (RLSA-2026:67584)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67584 advisory. rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd CVE-2026-19654...

RockyLinux 9 : rsyslog (RLSA-2026:67583)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67583 advisory. rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd CVE-2026-19654...

Malicious Package

Overview @pwaplatform/module-sso-integration is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

python: Fix of CVE-2026-9669

CVE-2026-9669: fix a stack buffer overflow in the bz2 module when a BZ2Decompressor object is reused after a decompression error; the decompressor now becomes unusable once libbz2 reports an error, instead of resuming from an invalid internal state...

CVE-2026-88412

An integer overflow in the BulkInsertReadProperty component /bulkinsert.c of FalkorDB Redis module v4.20.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-85219

Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage...

CVE-2026-85219 Denial-of-Service in the OpenCanary Redis service

Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage...

SUSE CVE-2026-90097

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition The VMBus module initialization function, hvacpiinit, currently does nothing when running in the root partition and root is not nested in another VM. But...

SUSE CVE-2026-90163

In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdproccleanup on module init failure When a later initializer fails, the unwind chain releases resources created after procfs and then jumps directly to classunregister. Returning an error from moduleinit leav...

CVE-2026-94383

The MISP blocklist workflow module accepted a user-supplied blocklist filename parameter without validating the file extension. The only sanitization applied was basename to strip path components and a check for empty or dot values. A site administrator could specify a filename with an arbitrary...

EUVD-2026-83908

The MISP blocklist workflow module accepted a user-supplied blocklist filename parameter without validating the file extension. The only sanitization applied was basename to strip path components and a check for empty or dot values. A site administrator could specify a filename with an arbitrary...

CVE-2026-94383 MISP Blocklist Workflow Module: Arbitrary Script Execution via Unrestricted File Extension

The MISP blocklist workflow module accepted a user-supplied blocklist filename parameter without validating the file extension. The only sanitization applied was basename to strip path components and a check for empty or dot values. A site administrator could specify a filename with an arbitrary...

CVE-2026-94383 MISP Blocklist Workflow Module: Arbitrary Script Execution via Unrestricted File Extension

The MISP blocklist workflow module accepted a user-supplied blocklist filename parameter without validating the file extension. The only sanitization applied was basename to strip path components and a check for empty or dot values. A site administrator could specify a filename with an arbitrary...

CVE-2026-94383 MISP Blocklist Workflow Module: Arbitrary Script Execution via Unrestricted File Extension

The MISP blocklist workflow module accepted a user-supplied blocklist filename parameter without validating the file extension. The only sanitization applied was basename to strip path components and a check for empty or dot values. A site administrator could specify a filename with an arbitrary...

Security Bulletin: Impacted IBM Optim 1.0.0 and 1.1.0  by vulnerabilities in Apache Tika PDF parser module

Summary IBM Optim versions 1.0.0 and 1.1.0 include open-source package Apache Tika that is affected by a critical vulnerability. IBM Optim 1.2.0 resolves this vulnerability by upgrading the affected open-source dependency to a fixed version. Vulnerability Details CVEID:CVE-2025-54988 DESCRIPTION:...

BIT-LIBPYTHON-2026-82049 tarfile extraction filters allow file modification and content disclosure via hard link to symlink

In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...

pwndbg v2026.09.15

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. It has a boatload of features, see our Features page and CHEATSHEET feel free to prin...

dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...