164560 matches found
ogmios-queryledgerstate-dump-poc
Ogmios queryLedgerState/dump — Unauthenticated Arbitrary Fil...
K000163682: Perl vulnerability CVE-2026-8376
Security Advisory Description Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perlstudychunk in regcompstudy.c checked the size of the joined...
Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control
Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. Progress published all 31 on October 12 and scored five of them critical. Fixes have been availab...
CVE-2026-104881
Channel access is enforced ONLY by the DataContainer voters "NewsletterChannelAccessVoter" / "NewsletterRecipientsAccessVoter", requiring USERCANEDITCHANNEL, whose "supportsType" fires exclusively for Create/Read/Update/DeleteAction subjects dispatched inside DCTable's create/edit/delete methods...
Security update for python
This update for python fixes the following issues: CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage bsc1273148. CVE-2026-9669: crafted input can cause a stack buffer overflow bsc1267974. CVE-2026-15806:...
SUSE-SU-2026:4633-1 Security update for python
This update for python fixes the following issues: - CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage bsc1273148. - CVE-2026-9669: crafted input can cause a stack buffer overflow bsc1267974. - CVE-2026-15806:...
K000163681: Multiple Linux kernel vulnerabilities
Security Advisory Description CVE-2025-61662 A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after its module is unloaded. An attacker can exploit this condition by invokin...
Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition
Summary IBM WebSphere Application Server is a required product for IBM Tivoli Network Manager IP Edition v4.2. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in below mentioned security bulletins. Vulnerability Details Refer to the securit...
Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies
Low-cost Android smartphones have been shipped with malicious software baked into the device firmware, allowing bad actors to covertly install apps, conduct ad fraud, and turn devices into residential proxies. The activity, which targets Android devices built on MediaTek platforms across several...
Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in Netty
Summary IBM SPSS Modeler is affected by multiple vulnerabilities in Netty. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-42587 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final,...
Exploit for CVE-2025-41450
Danfoss AK-SM 8xxA — CVE-2025-41450 / -41451 / -41452 PoC tool...
Security Bulletin: IBM Security QRadar Log Management AQL Plugin contains components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM Security QRadar Log Management AQL Plugin has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-82417 DESCRIPTION: Summary...
Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access. Vulnerability Details CVEID:CVE-2026-16830 DESCRIPTION: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote...
Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access. Vulnerability Details CVEID:CVE-2026-46242 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix epremove struct eventpoll / struct file UAF...
PT-2026-115530
CVE ID :CVE-2026-105142 Published : Oct. 13, 2026, 10:20 p.m. | 19 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Microsoft Windows: CVE-2026-83906: Windows Shell Spoofing Vulnerability
Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-59116: Use of a Broken or Risky Cryptographic Algorithm
Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network...
Apache NuttX RTOS 13.1.0 6LoWPAN HC06 Decompressor Out-of-Bounds Write
Apache NuttX RTOS version 13.1.0 contains an out-of-bounds write in the 6LoWPAN HC06 header decompressor when UDP and TCP support are disabled. !/usr/bin/env python Apache NuttX RTOS 13.1.0 6LoWPAN HC06 Decompressor Kernel Out-of-Bounds Write Vendor: The Apache Software Foundation Product web pag...
Apache Airflow 3.3.2 Secrets Masker Deep-Nesting Secret Leak
Apache Airflow version 3.3.2 contains a secret-masking flaw that can disclose registered secrets in task logs when string values are deeply nested under non-sensitive keys. !/usr/bin/env python Apache Airflow 3.3.2 masksecret Secrets Masker Deep-Nesting Secret Leak Vendor: The Apache Software...
PT-2026-112043
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop affected versions not specified Description The use of a broken or risky cryptographic algorithm in Windows Remote Desktop enables an unauthorized attacker to bypass a security feature over a network. Recommendations At...