Security Bulletin:Vulnerabilities exists in Jackson package used by IBM Netezza Appliance

Summary Vulnerabilities identified in the IBM Netezza Appliance have been remediated in the latest security patch release of NPS Vulnerability Details CVEID:CVE-2026-19032 DESCRIPTION: jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the...

Security update for python3-paramiko

This update for python3-paramiko fixes the following issue: CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternativel...

SUSE-SU-2026:4618-1 Security update for python3-paramiko

This update for python3-paramiko fixes the following issue: - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225...

K000163659: Next.js vulnerability CVE-2026-75604

Security Advisory Description Next.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 and 16.3.3, Next.js applications using Pages Router or App Router without Cache Components on Windows-hosted servers do not consistently escape backslashes in route...

Security Bulletin: IBM Guardium Key Lifecycle Manager is affected by a security vulnerability

Summary Security vulnerability has been addressed in IBM Guardium Key Lifecycle Manager Vulnerability Details CVEID:CVE-2026-78537 DESCRIPTION: IBM Guardium Key Lifecycle Manager could allow a local attacker to obtain sensitive information due to the use of a weak cryptographic algorithm...

Security Bulletin: Multiple security vulnerabilities identified in Containerized version of IBM Guardium Key Lifecycle Manager

Summary Multiple security vulnerabilities have been addressed in Containerized version of IBM Guardium Key Lifecycle Manager Vulnerability Details CVEID:CVE-2026-6732 DESCRIPTION: A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema...

Malicious code in css-nesting-transform (npm)

[email protected] was published to npm on 2026-10-07 01:32 UTC by user brahimhamidi the same account that published [email protected] on 2026-10-06. It is described as a CSS polyfill but contains none: index.js is an empty module byte-identical to the index.js of...

Exploit for UNIX Symbolic Link Following in Postgresql

abraxaslabs.tech · github.com/abraxas ·&...

K000163654: GLib vulnerabilities CVE-2026-1484 and CVE-2026-1489

Security Advisory Description CVE-2026-1484 A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocat...

FakeLiang

Automatic Attack Graph Verification Agent Read in an attack g...

Exploit for CVE-2026-91136

CVE-2026-91136 — Divi Plus ≤ 2.4.0 — Unauthenticated Arbitrary...

gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ !WARNING Gitleaks está completo en cuanto a funcionalidades. No estoy incorporando nuevas funciones en Gitleaks. Las versiones futuras serán solo parches de seguridad. Estoy centrando mi atención en Betterleaks license:...

Multiple vulnerabilities in rpm.rte affect AIX.

IBM SECURITY ADVISORY First Issue: Mon Oct 12 00:46:10 CDT 2026 Updated: Fri Oct 30 05:10:50 CDT 2026 Update: Added installation instruction as a NOTE to install rpm.rte fileset version 4.20.1.2003 with '-F' option. The most recent version of this document is available here:...

hsecscan

hsecscan Un escáner de seguridad para cabeceras de respuesta HTTP. Requisitos Python 2.x Módulos de Python os.path argparse sqlite3 urlparse urllib2 urllib json ssl Instalación $ pip install hsecscan Uso $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d 'POS...

CryptoLyzer

CryptoLyzer es un analizador rápido, flexible y completo de protocolos criptográficos de servidor TLS, SSL, SSH, IKE, DNSSEC y configuraciones relacionadas cabeceras HTTP, registros DNS y generador de huellas digitales JA3, HASSH con interfaces API y CLI. Use CryptoLyzer cuando necesite auditar...

poco-f6-unlock

POCO F6 / Redmi Turbo 3 — Bootloader Unlock A reproducible,...

K000163653: Apache HTTP Server vulnerabilities CVE-2026-56449 and CVE-2026-57941

Security Advisory Description CVE-2026-56449 Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68. CVE-2026-57941 Use After Free vulnerability in Apache HTTP Server's modhttp2 via...

Sublist3r

Acerca de Sublist3r Sublist3r es una herramienta de Python diseñada para enumerar subdominios de sitios web utilizando OSINT. Ayuda a los probadores de penetración y cazadores de bugs a recolectar y reunir subdominios para el dominio que están atacando. Sublist3r enumera subdominios utilizando...

CVE-2026-77363: Origin Validation Error

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection. When the documented loopback configuration uses auth.mode set to none, a maliciou...

CVE-2026-92682: Incorrect Authorization

In @neo4j/graphql versions from 7.0.0 up to but not including 7.6.4, the none quantifier in @authorization filters on relationships and connections is not negated when translated to Cypher, so it behaves like some. A rule such as "none of the related denied users matches the JWT subject" therefor...