Security Bulletin: Due to use of Apache Log4j, IBM Cloud PAK for Watson AI Ops is vulnerable to arbitrary code execution (CVE-2021-45046) and denial of service (CVE-2021-45105)

Summary Apache Log4j is used by IBM Cloud PAK for Watson AI Ops as part of its logging infrastructure. The CVE numbers are: CVE-2021-45105 and CVE-2021-45046. Vulnerabilities were identified within the Apache Log4j library that is used by IBM Cloud Pak for Watson AIOps. These vulnerabilities have...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: vault-k8s, mattermost, tempo, dapr, aws-fsx-csi-driver, crossplane-provider-azure-storagecache, crossplane-provider-aws-amp, temporal-server, cloud-sql-proxy, crossplane-provider-aws-directconnect, local-static-provisioner, frankenphp-8.5,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: vault-k8s, mattermost, tempo, dapr, aws-fsx-csi-driver, crossplane-provider-azure-storagecache, crossplane-provider-aws-amp, temporal-server, cloud-sql-proxy, crossplane-provider-aws-directconnect, local-static-provisioner, frankenphp-8.5,...

horus

مشروع | Horus جدول المحتويات 🚀 عن Horus ⚡ تعليمات التثبيت والاستخدام ⚙️ إعداد API 🔮 الميزات المقصودة 🤝 المشرفون الحاليون 🛠️ المساهمة 📧 تواصل معي 🤝 شكر وتقدير 🚀 عن Horus Horus هو أداة شاملة متكاملة للمساعدة في التحقيقات، من الاستفادة من واجهات API إلى تجميع البيانات أيضًا. إنه رفيقك قبل العمليات! ⚡...

CS-Remote-OPs-BOF

Remote Operations BOF This repo serves as an addition to our previously released SA repo. Our original stance was that we would not release our tooling that modified other systems, and we would only provide information gathering tooling in a ready to go format. Over time, we have seen many other...

CVE-2026-87109

An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to another member of the same organizatio...

CVE-2026-87110

An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly work without rate limiting. This can temporarily slow other traffic served by the same process while requests continue...

CVE-2026-87108

An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration...

EUVD-2026-95492

An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to another member of the same organizatio...

Ops Manager Sensitive MFA Enrollment Information Exposure in User Listings

An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to another member of the same organizatio...

CVE-2026-87109 Ops Manager Sensitive MFA Enrollment Information Exposure in User Listings

An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to another member of the same organizatio...

CVE-2026-87109

An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed via user-listing endpoints. This vulnerability occurs specifically while a member's enrollment remains unconfirmed, leading to the disclosure of secret authentication material to o...

Ops Manager Improper Authorization in Daily Host Monitoring Retrieval

An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration...

EUVD-2026-95491

An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration...

CVE-2026-87108 Ops Manager Improper Authorization in Daily Host Monitoring Retrieval

An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration...

CVE-2026-87108

An authenticated Ops Manager user with a read-only project role can exploit a flaw in daily host monitoring retrieval. Due to insufficient ownership validation , an attacker possessing a specific record identifier can retrieve a monitoring record associated with a different project . This unautho...

EUVD-2026-95490

An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly work without rate limiting. This can temporarily slow other traffic served by the same process while requests continue...

CVE-2026-87110

The Ops Manager web port is susceptible to uncontrolled resource consumption (CWE-770). An unauthenticated user with network access can repeatedly request specific monitoring endpoints that perform costly operations. Because these endpoints lack rate limiting , the attack can temporarily slow dow...

hacker-scripts

अंग्रेज़ी | 简体中文 हैकर स्क्रिप्ट्स एक सच्ची कहानी पर आधारित: xxx: ठीक है, तो, हमारा बिल्ड इंजीनियर दूसरी कंपनी में चला गया। वह आदमी सचमुच टर्मिनल में रहता था। आप जानते हैं, उस तरह का आदमी जो Vim से प्यार करता है, Dot में डायग्राम बनाता है और Markdown में विकी-पोस्ट लिखता है... अगर किसी चीज़ में -...

zirconium

zirconium Call of Duty: Black Ops 2 Zombies प्लूटोनियम मॉड के साथ के लिए DLL-इंजेक्ट करने योग्य गेम चीट। डाउनलोड Releases पेज पर उपलब्ध हैं अस्वीकरण: यह प्रोजेक्ट इसलिए मौजूद है क्योंकि मैं BO2 पर बड़ा हुआ हूँ, और यह रिवर्सिंग के लिए एक अच्छा लक्ष्य भी साबित हुआ। यह 14 साल पुराना AAA गेम है जो...