Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Security Bypass

Summary golang.org/x/crypto is used by IBM Storage Fusion Data Foundation, which could cause Security Bypass. CVE-2022-30636, CVE-2024-45337, CVE-2025-22869, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181. Vulnerability Details CVEID:CVE-2022-30636 DESCRIPTION: httpTokenCacheKey uses path.Base to...

Xstream-1.4.17

Xstream-1.4.17 The above Xstream Demo environment was built by me. The vulnerability exploitation environment is based on JDK1.8u131. It currently supports local testing and HTTP remote packet sending. XSTREAM=1.4.17 vulnerability reproduction CVE-2021-39141, CVE-2021-39144, CVE-2021-39150,...

CLSA-2026-1788201541 TuxCare security update for org.springframework (17 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 17 CVEs. Fixed in 6.2.19-tuxcare.1...

CLSA-2026-1788195644 TuxCare security update for axios (5 CVEs)

TuxCare rebuilt axios to address 5 CVEs. Fixed in 1.7.9-tuxcare.4...

Fedora 43 : hcloud (2026-b661d1a235)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b661d1a235 advisory. Update to 1.67.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Security update for postgresql18 (important)

openSUSE security update: security update for postgresql18 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21703-1 Rating: important References: bsc1275001 bsc1275002 bsc1275042 bsc1275043 bsc1275044 bsc1275046 bsc1275047 bsc1275048 bsc1275049...

Security update for postgresql17 (important)

openSUSE security update: security update for postgresql17 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21702-1 Rating: important References: bsc1275001 bsc1275002 bsc1275042 bsc1275043 bsc1275044 bsc1275046 bsc1275047 bsc1275048 bsc1275049...

Security update for postgresql15 (important)

openSUSE security update: security update for postgresql15 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21700-1 Rating: important References: bsc1275001 bsc1275002 bsc1275042 bsc1275043 bsc1275044 bsc1275046 bsc1275047 bsc1275048 bsc1275049...

Security update for postgresql14 (important)

openSUSE security update: security update for postgresql14 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21699-1 Rating: important References: bsc1275001 bsc1275002 bsc1275042 bsc1275043 bsc1275044 bsc1275046 bsc1275047 bsc1275048 bsc1275049...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.3-0.3.hum1 aarch64, x8664 grafana13.1-13.1.3-0.3.hum1.src src Security Fixes: grafana13.1: CVE-2026-6322 CVE-2026-75899 CVE-2026-75931 CVE-2026-75975 CVE-2026-76172...

nmap-vulnerability-scan-scripts

Avviso di vulnerabilità CyRC di Synopsys: https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps.html CVE-2022-45477, CVE-2022-45479, CVE-2022-45482, CVE-2022-45481...

CVEs-for-picoc-3.2.2

CVEs-for-picoc-3.2.2 File di riproduzione per le CVE da CVE-2022-44312 a CVE-2022-44321 Riferimenti CVE PicoC v3.2.2 Heap Overflow nella funzione ExpressionCoerceInteger in expression.c CVE-2022-44312 PicoC v3.2.2 Heap Overflow nella funzione ExpressionCoerceUnsignedInteger in expression.c...

AvTech-PoCs

PoCs da AvTech PoCs para CVE-2025-57199, CVE-2025-57200, CVE-2025-57201, CVE-2025-57202 e CVE-2025-57203. Veja o artigo do blog...

openSUSE 16 Security Update : v2ray-core (openSUSE-SU-2026:21653-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21653-1 advisory. Changes in v2ray-core: - Update version to 5.53.0 Add X-Forwarded-For support to gRPC transport Add Stream based Packet Addr for UDP Connections...

[SECURITY] [DSA 6476-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6476-1 [email protected] https://www.debian.org/security/ Andres Salomon August 27, 2026 https://www.debian.org/security/faq -...

CVE-Ubiquiti

CVE-Ubiquiti Vulnerabilidades de Segurança Ubiquiti UniFi Este repositório contém informações e recursos relacionados às seguintes vulnerabilidades de segurança Ubiquiti UniFi: CVE-2026-77542 CVE-2026-77543 CVE-2026-77545 CVE-2026-77550 CVE-2026-77551 CVE-2026-77552 CVE-2026-77553 CVE-2026-77554...

Cisco-CVE-2026-20303-More

Cisco-CVE-2026-20303-More CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313 Spenden...

CLSA-2026-1787823934 TuxCare security update for tar (2 CVEs)

TuxCare rebuilt tar to address 2 CVEs. Fixed in 6.0.2-tuxcare.1...

CLSA-2026-1787822123 TuxCare security update for angular (6 CVEs)

TuxCare rebuilt angular to address 6 CVEs. Fixed in 1.4.7-tuxcare.1...

POC-DUMP

POC-DUMP Writeup o scripting per qualsiasi bug/vulnerabilità interessante che ho trovato. CVE attuali e in aumento: • CVE-2021-35475 • CVE-2022-36194 • CVE-2022-36667 • CVE-2022-36668 • CVE-2022-36669 • CVE-2022-37137 • CVE-2022-37138 • CVE-2022-37139 • CVE-2022-37140 • CVE-2022-3211 • CVE-2022-3...