164482 matches found
cybersec-ranch
🤠 CyberSec Ranch — Cybersecurity Training & CTF Lab Suite...
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform BTP that use the SDK, SAP's official Python clie...
Security Bulletin: An IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service, SQL injection and could allow a remote attacker to execute arbitrary code on the system.
Summary IBM QRadar when using the HTTP Receiver protocol could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. Vulnerability Details CVEID:CVE-2026-93441 DESCRIPTION: IBM QRadar could allow a remote attacker to cause a denial of service due to...
CVE-2026-71892
A flaw was found in Bouncy Castle. A remote attacker can bypass cryptographic key-size validation by sending a crafted Cryptographic Message Syntax CMS message that uses key derivation. Due to an incorrect algorithm identifier comparison in the recipient handling logic, key-size verification is...
CVE-2026-71888
A flaw was found in Bouncy Castle. In its Cryptographic Message Syntax CMS streaming parser, messages with mismatched attribute and algorithm fields are improperly handled, allowing attributes to be returned as valid even though they were not protected by the Message Authentication Code MAC. A...
Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities
Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2024-53161 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: EDAC/bluefield: Fix potential integer overflow The 64-bit argument for the "get DIMM...
SUSE CVE-2026-109229
SGLang through 0.5.21 contains a denial of service vulnerability that disables Pillow decompression bomb protection process-wide by setting Image.MAXIMAGEPIXELS to None in NanoNemotronVLImageProcessor. Remote attackers can submit small, highly compressed images with huge dimensions to the generic...
Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in Apache ZooKeeper
Summary IBM SPSS Modeler is affected by multiple vulnerabilities in Apache ZooKeeper. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-59739 DESCRIPTION: Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check. An...
hplip: HP Linux Imaging and Printing Software - Use of DSA Key
A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability is due to the use of a weak Digital Signature Algorithm DSA for code signing. A remote attacker could exploit this weakness to forge signatures, potentially leading to the execution of unauthorized code or...
Security Bulletin: IBM WebSphere Application Server Liberty is affected by an authentication bypass (CVE-2026-93909)
Summary IBM WebSphere Application Server Liberty is affected by an authentication bypass with the samlWeb-2.0 enabled. Vulnerability Details CVEID:CVE-2026-93909 DESCRIPTION: IBM WebSphere Application Server Liberty is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature ...
Security Bulletin: IBM Terracotta is affected by Jetty vulnerabilities that could allow attackers to bypass security controls, hijack user sessions, or access unauthorized data
Summary IBM Terracotta utilizes Jetty as a lightweight Java-based web server and servlet container that allows developers to run web applications and provide machine-to-machine communications. Vulnerability Details CVEID:CVE-2026-19203 DESCRIPTION: A client may issue specially crafted HTTP/1.1...
pfsense-carp-vhid
abraxaslabs.tech · github.com/abraxas ·&...
pfsense-limiter-number
abraxaslabs.tech · github.com/abraxas ·&...
Security Bulletin: IBM WebSphere Application Server is affected by an improper authentication (CVE-2026-95680)
Summary IBM WebSphere Application Server is affected by an improper authentication. Vulnerability Details CVEID:CVE-2026-95680 DESCRIPTION: IBM WebSphere Application Server could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell...
Security Bulletin: IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data (CVE-2026-93905)
Summary IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data with the batchManagement-1.0 enabled. Vulnerability Details CVEID:CVE-2026-93905 DESCRIPTION: IBM WebSphere Application Server Liberty could allow an unauthenticated remote attacker to corrupt the...
Security Bulletin: IBM WebSphere Application Server Liberty is affected by multiple vulnerabilities (CVE-2026-93895, CVE-2026-95695, CVE-2026-95696)
Summary IBM WebSphere Application Server Liberty is affected by multiple vulnerabilities with grpc-1.0 enabled. Vulnerability Details CVEID:CVE-2026-93895 DESCRIPTION: WebSphere Application Server Liberty could allow an unauthenticated remote attacker to bypass access controls configured on gRPC...
Security Bulletin: IBM WebSphere Application Server Liberty is affected by an improper access control (CVE-2026-105443)
Summary IBM WebSphere Application Server Liberty is affected by an improper access control vulnerability with the restConnector-1.0 or restConnector-2.0 enabled. Vulnerability Details CVEID:CVE-2026-105443 DESCRIPTION: IBM WebSphere Application Server Liberty has insufficient isolation between...
Security Bulletin: IBM i is Affected by a Denial of Service in Digital Certificate Manager [CVE-2026-107674]
Summary IBM i is vulnerable to denial of service CVE-2026-107674 in Digital Certificate Manager DCM as described in the vulnerability details section. Vulnerability Details ID: CVE-2026-107674 DESCRIPTION: IBM i is vulnerable to a denial of service to Digital Certificate Manager DCM for System TL...
Security Bulletin: IBM i is Affected by a Heap Buffer Overflow Vulnerability in Zlib [CVE-2026-85091]
Summary IBM i is vulnerable to a heap buffer overflow vulnerability due to an unchecked memmove in Zlib CVE-2026-85091 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-85091 DESCRIPTION: zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow...