164625 matches found
Security Bulletin:Vulnerabilities exists in Ant package used by IBM Netezza Appliance
Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in the latest security patch release of NPS. Vulnerability Details CVEID:CVE-2026-78254 DESCRIPTION: The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative...
CLSA-2026-1791791913 Fix CVE(s): CVE-2026-5119
SECURITY UPDATE: secure cookies sent in cleartext to HTTP proxy in CONNECT requests - debian/patches/CVE-2026-5119.patch: don't add cookies to a CONNECT request for a tunnelled HTTPS connection in msgstartingcb in libsoup/soup-cookie-jar.c - CVE-2026-5119...
Security Bulletin:Vulnerabilities exists in Jetty package used by IBM Netezza Appliance
Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in the latest security patch release of NPS. Vulnerability Details CVEID:CVE-2026-19203 DESCRIPTION: A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediar...
Security Bulletin:Vulnerabilities exists in Netty package used by IBM Netezza Appliance
Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in the latest security patch release of NPS. Vulnerability Details CVEID:CVE-2026-59902 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final,...
Security Bulletin:Vulnerabilities exists in Jackson package used by IBM Netezza Appliance
Summary Vulnerabilities identified in the IBM Netezza Appliance have been remediated in the latest security patch release of NPS Vulnerability Details CVEID:CVE-2026-19032 DESCRIPTION: jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the...
Security update for python3-paramiko
This update for python3-paramiko fixes the following issue: CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternativel...
SUSE-SU-2026:4618-1 Security update for python3-paramiko
This update for python3-paramiko fixes the following issue: - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225...
K000163659: Next.js vulnerability CVE-2026-75604
Security Advisory Description Next.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 and 16.3.3, Next.js applications using Pages Router or App Router without Cache Components on Windows-hosted servers do not consistently escape backslashes in route...
Security Bulletin: IBM Guardium Key Lifecycle Manager is affected by a security vulnerability
Summary Security vulnerability has been addressed in IBM Guardium Key Lifecycle Manager Vulnerability Details CVEID:CVE-2026-78537 DESCRIPTION: IBM Guardium Key Lifecycle Manager could allow a local attacker to obtain sensitive information due to the use of a weak cryptographic algorithm...
Security Bulletin: Multiple security vulnerabilities identified in Containerized version of IBM Guardium Key Lifecycle Manager
Summary Multiple security vulnerabilities have been addressed in Containerized version of IBM Guardium Key Lifecycle Manager Vulnerability Details CVEID:CVE-2026-6732 DESCRIPTION: A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema...
Malicious code in css-nesting-transform (npm)
[email protected] was published to npm on 2026-10-07 01:32 UTC by user brahimhamidi the same account that published [email protected] on 2026-10-06. It is described as a CSS polyfill but contains none: index.js is an empty module byte-identical to the index.js of...
Exploit for UNIX Symbolic Link Following in Postgresql
abraxaslabs.tech · github.com/abraxas ·&...
K000163654: GLib vulnerabilities CVE-2026-1484 and CVE-2026-1489
Security Advisory Description CVE-2026-1484 A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocat...
FakeLiang
Automatic Attack Graph Verification Agent Read in an attack g...
Exploit for CVE-2026-91136
CVE-2026-91136 — Divi Plus ≤ 2.4.0 — Unauthenticated Arbitrary...
gitleaks
Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ !WARNING Gitleaks está completo en cuanto a funcionalidades. No estoy incorporando nuevas funciones en Gitleaks. Las versiones futuras serán solo parches de seguridad. Estoy centrando mi atención en Betterleaks license:...
Multiple vulnerabilities in rpm.rte affect AIX.
IBM SECURITY ADVISORY First Issue: Mon Oct 12 00:46:10 CDT 2026 Updated: Fri Oct 30 05:10:50 CDT 2026 Update: Added installation instruction as a NOTE to install rpm.rte fileset version 4.20.1.2003 with '-F' option. The most recent version of this document is available here:...
hsecscan
hsecscan Un escáner de seguridad para cabeceras de respuesta HTTP. Requisitos Python 2.x Módulos de Python os.path argparse sqlite3 urlparse urllib2 urllib json ssl Instalación $ pip install hsecscan Uso $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d 'POS...
CryptoLyzer
CryptoLyzer es un analizador rápido, flexible y completo de protocolos criptográficos de servidor TLS, SSL, SSH, IKE, DNSSEC y configuraciones relacionadas cabeceras HTTP, registros DNS y generador de huellas digitales JA3, HASSH con interfaces API y CLI. Use CryptoLyzer cuando necesite auditar...