991099 matches found
PT-2026-65797
Name of the Vulnerable Software and Affected Versions open-iscsi versions prior to 56718d4e9d1a4f51c30697b5c0534144bb41c9bb Description A Double Free issue allows an unauthenticated man-in-the-middle MITM attacker to cause a denial of service DoS. A Double Free occurs when the program attempts to...
CVE-2026-55995: Double Free
A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb...
CVE-2026-55995: Double Free
A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb...
angr 9.3.1
angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...
CVE-2026-18266: URL Redirection to Untrusted Site
Dify AI Workflow oauthredirecturl Open Redirect Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Dify. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...
PT-2026-65788
Name of the Vulnerable Software and Affected Versions open-iscsi versions prior to 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e Description An incorrect authorization issue allows unprivileged local users to access and use the isscsiuio control socket. Recommendations Update to a version later than...
FreeBSD-SA-26:52.if_wg
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:52.ifwg Security Advisory The FreeBSD Project Topic: Missing MAC validation in wg4 packet decryption Category: core Module: ifwg Announced: 2026-07-29...
Linux Distros Unpatched Vulnerability : CVE-2026-44943
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in open- iscsi allows remote MITM attackers to create root-owned...
Linux Distros Unpatched Vulnerability : CVE-2026-44944
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket. This issue affects open-iscsi: from...
Linux Distros Unpatched Vulnerability : CVE-2026-55995
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through...
onionshare v2.6.5
OnionShare OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Installing OnionShare You can download OnionShare for Windows and macOS from the OnionShare website. For macOS you can also use Homebrew:...
CVE-2026-55391
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.63.0, datamodel-code-generator validates a URL host once in src/datamodelcodegenerator/http.py through...
Security Bulletin: Cargo in IBM Open SDK for Rust on AIX uses a vulnerable version of gix
Summary The cargo package manager in IBM Open SDK for Rust on AIX 1.92.0.2 and 1.94.0.0 uses gix and gix-submodule crates that are vulnerable to command injection. Vulnerability Details CVEID:CVE-2026-40034 DESCRIPTION: gix-submodule before 0.29.0 gitoxide before 0.5.21, gix before 0.84.0...
Security Bulletin: Cargo in IBM Open SDK for Rust on AIX uses a vulnerable version of the cargo crate
Summary The cargo package manager in IBM Open SDK for Rust on AIX 1.92.0.2 and 1.94.0.0 ships a version of the cargo crate that incorrectly handles symlinks inside tar balls. Vulnerability Details CVEID:CVE-2026-5222 DESCRIPTION: Cargo between 1.68 and 1.96 incorrectly normalized the URLs of...
Security Bulletin: Cargo in IBM Open SDK for Rust on AIX uses a vulnerable version of the openssl crate
Summary The cargo package manager in IBM Open SDK for Rust on AIX 1.92.0.2 and 1.94.0.0 ships a version of the openssl crate that contains multiple vulnerabilities. Vulnerability Details CVEID:CVE-2026-42327 DESCRIPTION: rust-openssl provides OpenSSL bindings for the Rust programming language. Fr...
Security Bulletin: Cargo in IBM Open SDK for Rust on AIX uses a vulnerable version of gix-fs
Summary The cargo package manager in IBM Open SDK for Rust on AIX 1.92.0.2 and 1.94.0.0 uses version 0.19 of the gix-fs crate which is vulnerable to improper link resolution before file access. Vulnerability Details CVEID:CVE-2026-44471 DESCRIPTION: gitoxide is an implementation of git written in...
CVE-2026-48058 nebula-mesh: Session and OIDC state cookies lack the Secure attribute
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/web/session.go and internal/web/oidc.go set HttpOnly and SameSite=Lax on every cookie but never Secure. A single plaintext request to the origin operator on a LAN, mistyped...
opencti v7.260728.0
Introduction OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. It has been created in order to structure, store, organize and visualize technical and non-technical information about cyber threats. The structuration of th...
akto vmini-runtime-1.72.2
Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...
