Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server, which impacts IBM Tivoli Netcool Configuration Manager

Summary IBM WebSphere Application Server is a required product for IBM Tivoli Netcool Configuration Manager version 6.4.2. Multiple vulnerabilities were addressed in IBM WebSphere Application Server. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

ResetNightmare-impacket

ResetNightmare — CVE-2026-27912 Linux / impacket tooling for CVE-2026-27912 "ResetNightmare". Resets a target Active Directory account's password by requesting a kadmin/changepw TGT for an NTENTERPRISE principal whose name is the target's sAMAccountName, using an account UPNUser on which we can...

forti-research

Fortinet fortimon374.sys - PPL Bypass via Unauthenticated Kill Command Overview A vulnerability in Fortinet's fortimon374.sys kernel driver FortiClient's "anti-exploit" minifilter allows any local administrator to terminate any process - including PPL Protected Process Light protected processes...

Security Bulletin: Platform Navigator in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in browserslist

Summary Platform Navigator in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in browserslist. CVE-2026-73088, CVE-2026-73089 The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-73088 DESCRIPTION: Browserslist is a configuration tool for sharing...

Security Bulletin: Platform Navigator in IBM Cloud Pak for Integration is vulnerable to a vulnerability in ws

Summary Platform Navigator in IBM Cloud Pak for Integration is vulnerable to a vulnerability in ws CVE-2026-62389. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-62389 DESCRIPTION: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authori...

ruby-advisory-db

Ruby 安全公告数据库 Ruby 安全公告数据库是一项社区工作，旨在汇编所有与 Ruby 库相关的安全公告。 我们期望其他人创建数据，例如获取 CVE、GHSA、OSVDB、CVSS 或原始漏洞信息。 更多详情请参见此处。 您可以使用 bundler-audit 将您自己的 Gemfile.lock 与此数据库进行比对。 支持 Ruby 安全！ 您是否知道此数据库中未列出的漏洞？请提交 issue 或提交 PR。 目录结构 该数据库是一系列与 rubygems.org 上 Ruby 库名称匹配的目录列表。每个目录中包含一个或多个针对该 Ruby 库的公告文件。这些公告文件使用公告的 C...

CVE-2025-28355

CVE-2025-28355 Se identificó que la aplicación https://github.com/Volmarg/personal-management-system es vulnerable a ataques CSRF, una de las muchas acciones que un atacante puede realizar es engañar a un usuario legítimo para que ejecute una solicitud de sitio cruzado que alterará su contraseña,...

CVE-2026-64638

CVE-2026-64638 Reflected XSS on Login Screen Leading to PHP Code Execution — WordPress Core Software: WordPress Core ≤ 7.0.2 all versions prior to 7.0.3 CVSS: 8.9 High CWE: CWE-79 — Improper Neutralization of Input During Web Page Generation Authentication Required: None Pre-Auth User Interaction...

CVE-2026-29000

CVE-2026-29000: Prueba de Concepto de Bypass de Autenticación JWT en pac4j Prueba de Concepto para CVE-2026-29000 - Una vulnerabilidad crítica de bypass de autenticación en la implementación JWT de pac4j que permite a atacantes falsificar tokens de administrador sin una firma válida. ⚠️ AVISO LEGA...

CVE-2026-9018

CVE-2026-9018 CVE-2026-9018 — Easy Elements for Elementor ≤ 1.4.5 | Unauthenticated Privilege Escalation Research by: Atomic Edge Severity: High | CVSS: 8.8 | Auth Required: None Overview An unauthenticated privilege escalation vulnerability exists in the Easy Elements for Elementor – Addons &...

pdf.js-CVE-2024-4367

🚨 CVE-2024-4367 - Escáner Universal de Vulnerabilidad PDF.js ⚠️ HERRAMIENTA DE SEGURIDAD CRÍTICA | Detecta CVE-2024-4367 CVSS 9.8 - Vulnerabilidad de Ejecución Remota de Código en PDF.js Funciona en CUALQUIER sitio web - Sin configuración requerida 📋 Tabla de Contenidos 📖 Resumen ⚡ Inicio Rápido 🔍...

rust_citadel

Citadel Post-quantum hybrid encryption and key management server. Citadel combines X25519 + ML-KEM-768 for key encapsulation and AES-256-GCM for data encryption, following NIST's hybrid approach for the post-quantum transition. Applications encrypt and decrypt data through a REST API. Citadel...

fabric8io__kubernetes-client_CVE-2021-4178_5-0-2

Kubernetes & OpenShift Java Client This client provides access to the full Kubernetes & OpenShift REST APIs via a fluent DSL. kubernetes-client: kubernetes-model-core: openshift-client: knative-client: !Maven Centralhttps://img.shields.io/m...

reconix

Reconix Reconnaissance Intelligence Engine | Leak Scanner | Threat Intelligence Suite 🔍 Deep Exposure Intelligence • ⚡ High-Signal Recon Engine ⚠️ LEGAL DISCLAIMER Reconix is designed EXCLUSIVELY for authorized security testing, bug bounty programs, and defensive research. ✅ DO scan targets you ow...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to OS command injection (CVE-2025-14754)

Summary IBM Cloud Pak for Data is vulnerable to OS command injection due to improper validation of user-supplied input. An authenticated remote attacker could exploit this vulnerability to execute arbitrary commands with elevated privileges on the system, potentially leading to full system...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to path traversal (CVE-2025-14753)

Summary IBM Cloud Pak for Data is vulnerable to a path traversal attack. A remote attacker could send a specially crafted URL containing "dot dot" sequences /../ to traverse directories and view arbitrary files on the system, potentially exposing sensitive information. Vulnerability Details...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in spring boot (CVE-2026-40972)

Summary IBM Db2 Developer Extension is affected by vulnerability in spring boot CVE-2026-40972 Vulnerability Details CVEID:CVE-2026-40972 DESCRIPTION: An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote secret. ...

Security Bulletin: IBM DB2 Developer extension is affected via vulnerability in spring-web(CVE-2026-22741)

Summary IBM DB2 Developer extension is affected via vulnerability in spring-webCVE-2026-22741 Vulnerability Details CVEID:CVE-2026-22741 DESCRIPTION: Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be...

safetext

safetext This is not an officially supported Google product. Safe-by-construction libraries for producing formats like YAML, to replace syntax-unaware libraries like text/template and sprintf that are at risk of injection vulnerabilities. Example use-case Since text/template is not syntax-aware o...

CVE-2026-27280

Out-of-bounds write in dngrendertask::ProcessArea Adobe DNG SDK / Android Reached from an ordinary DNG file through Android's public image-decoding API , and reproduced on a Galaxy S25 using the phone's own/system/lib64/libdngsdk.so. Vulnerable: DNG SDK 1.7.1 build 2410 / 2471 2410 is what the...