msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana OnPrem build 1.0.323 Vulnerability Details CVEID:CVE-2026-48776 DESCRIPTION: LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python...

EUVD-2026-62934

In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The vulnerability is possible because Automation Broker log uploads accept crafted filename input before writing log files. For more information see...

CVE-2026-76369

In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The vulnerability is possible because Automation Broker log uploads accept crafted filename input before writing log files. For more information see...

CVE-2026-76369

CVE-2026-76369 is a path traversal vulnerability in Splunk SOAR versions below 8.6.0 . A user holding the OnPrem Broker role can write files outside the intended Automation Broker log directory by supplying crafted filename input during log uploads. The root cause is insufficient validation of fi...

CVE-2026-76369 Path Traversal through Automation Broker in Splunk SOAR

In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The vulnerability is possible because Automation Broker log uploads accept crafted filename input before writing log files. For more information see...

PT-2026-78796

Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description A user with the OnPrem Broker role can write files outside the designated Automation Broker log directory. This occurs because the Automation Broker log upload process accepts crafted filename...

CVE-2026-76369: Improper Limitation of a Pathname to a Restricted Directory

In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The vulnerability is possible because Automation Broker log uploads accept crafted filename input before writing log files. For more information see...

Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana OnPrem build 1.0.321 Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used by .test and .match...

edos (1.3.0), proxmox-pci-switcher (>=0.14.1, <=0.15.3) +5 more potentially affected by CVE-2026-44405 via paramiko (2.10.4)

paramiko PYPI version 2.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - edos 1.3.0 - proxmox-pci-switcher =0.14.1, =2.2.0, =2.3.2 - resoto-plugins 2.2.0 - runhouse 0.1.1 - trainyard 0.0.3 Source cves: CVE-2026-44405...

brevia (>=0.0.1, <=0.0.7), langdechat (>=0.1.0, <=0.1.1) +4 more potentially affected by CVE-2026-55443 via langchain (0.0.240)

langchain PYPI version 0.0.240 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - brevia =0.0.1, =0.1.0, =0.1.1, =0.0.1, =0.1.0, =0.1.6 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

brevia (>=0.0.1, <=0.0.7), langdechat (>=0.1.0, <=0.1.1) +4 more potentially affected by CVE-2026-55443 via langchain (0.0.240)

langchain PYPI version 0.0.240 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - brevia =0.0.1, =0.1.0, =0.1.1, =0.0.1, =0.1.0, =0.1.6 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana OnPrem build 1.0.319 Vulnerability Details CVEID:CVE-2018-20225 DESCRIPTION: An issue was discovered in pip all versions because it installs the version with the highest version number, even if the user had intended...

edos (1.3.0), proxmox-pci-switcher (>=0.14.1, <=0.15.3) +5 more potentially affected by CVE-2026-44405 via paramiko (2.10.4)

paramiko PYPI version 2.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - edos 1.3.0 - proxmox-pci-switcher =0.14.1, =2.2.0, =2.3.2 - resoto-plugins 2.2.0 - runhouse 0.1.1 - trainyard 0.0.3 Source cves: CVE-2026-44405...

CVE-2026-7163 Assisted-service: assisted-service: authenticated users can gain administrative access to openshift clusters via credential disclosure

A vulnerability in the assisted-service REST API, an optional Assisted Installer assisted-service component in the Multicluster Engine MCE, allows an authenticated user with minimal namespace-scoped privileges to obtain administrative credentials for arbitrary clusters provisioned through the hub...

Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana OnPrem build 1.0.313 Vulnerability Details CVEID:CVE-2025-49177 DESCRIPTION: A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a clie...

Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana OnPrem build 1.0.311 Vulnerability Details CVEID:CVE-2025-4878 DESCRIPTION: A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function...

CVE-2025-12766

An Insecure Direct Object Reference IDOR vulnerability in the Management Console of BlackBerry® AtHoc® OnPrem version 7.21 could allow an attacker to potentially gain unauthorized knowledge about other organizations hosted on the same Interactive Warning System IWS...

CVE-2025-12766

An Insecure Direct Object Reference IDOR vulnerability in the Management Console of BlackBerry® AtHoc® OnPrem version 7.21 could allow an attacker to potentially gain unauthorized knowledge about other organizations hosted on the same Interactive Warning System IWS...

CVE-2025-12766 Insecure Direct Object Reference (IDOR) vulnerability in the Management Console of affected versions of BlackBerry AtHoc.

An Insecure Direct Object Reference IDOR vulnerability in the Management Console of BlackBerry® AtHoc® OnPrem version 7.21 could allow an attacker to potentially gain unauthorized knowledge about other organizations hosted on the same Interactive Warning System IWS...