Linux Distros Unpatched Vulnerability : CVE-2026-15928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component. CVE-2026-15928...

PT-2026-64999

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.6 Description A remote code execution issue exists in the configuration API. Authenticated administrators possessing CONFIGURATION EDIT and ATTACHMENT ADD privileges can write arbitrary PHP files by manipulating...

Exploit for Improper Authorization in Microsoft

Certighost Slidev deck This directory contains the Slidev pre...

Fedora 43 : pam (2026-adc8ddbeaa)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-adc8ddbeaa advisory. pamuserdb: fix password comparison timing leak Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 44 : lego (2026-30e8e9a2b2)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-30e8e9a2b2 advisory. Update to 5.3.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 44 : xrdp (2026-9d3c766833)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9d3c766833 advisory. Update PAM file to better match modern reality. Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

PT-2026-65088

Name of the Vulnerable Software and Affected Versions Valkey versions prior to 7.2.14 Valkey versions prior to 8.0.10 Valkey versions prior to 8.1.9 Valkey versions prior to 9.0.5 Valkey versions prior to 9.1.1 Description The RESTORE command accepts a malformed RDB stream payload that assigns on...

OPENSUSE-SU-2026:11382-1 yq-4.53.3-1.2 on GA media

These are all security issues fixed in the yq-4.53.3-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11381-1 valkey-9.1.1-1.1 on GA media

These are all security issues fixed in the valkey-9.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in @ks-radar/radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe5f14a06be3c24f9b771e8bbe33139614129069d276962f0c7e019fd89cbce On npm install, the package's preinstall lifecycle script preinstall.js reads a hex-encoded command string from preinstall.json, decodes it via...

MAL-2026-11066 Malicious code in @ks-radar/radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe5f14a06be3c24f9b771e8bbe33139614129069d276962f0c7e019fd89cbce On npm install, the package's preinstall lifecycle script preinstall.js reads a hex-encoded command string from preinstall.json, decodes it via...

MAL-2026-11067 Malicious code in blessclient (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82efbe82f1f4cdc513a33b4deeb7a811318155aaf4de1d4319dc54f8730f409b The package name matches Lyft's internal python-blessclient and is published on the public index as a dependency-confusion tripwire. setup.py overrid...

Malicious code in blessclient (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82efbe82f1f4cdc513a33b4deeb7a811318155aaf4de1d4319dc54f8730f409b The package name matches Lyft's internal python-blessclient and is published on the public index as a dependency-confusion tripwire. setup.py overrid...

GHSA-V74W-7MR3-4QG3 vulnerabilities

Vulnerabilities for packages: thingsboard, hadoop-fips, apache-hop-fips, tez, apache-hop, management-api-for-apache-cassandra-5.0, seata...

GHSA-6P8H-3WGX-97GF vulnerabilities

Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips, jupyter-all-spark-notebook, opal, awx, mlflow-fips, mlflow...

GHSA-3RP5-JJMW-4WV2 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips, jupyter-all-spark-notebook, opal, awx, mlflow-fips, mlflow...

GHSA-V74W-7MR3-4QG3 vulnerabilities

Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, tez...

GHSA-G35J-M5XG-VH3Q vulnerabilities

Vulnerabilities for packages: k3s, kubo, spegel, ipfs-cluster...

Malicious code in swiper_angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a523a0f2bb0df423657f50e42be71ae87d3071b859e1f4eb88a90709ba0ca5 Package name typosquats swiper/swiper-angular at implausible version 5.9999.1. The preinstall.js script runs at install time and collects installer...

MAL-2026-11065 Malicious code in swiper_angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a523a0f2bb0df423657f50e42be71ae87d3071b859e1f4eb88a90709ba0ca5 Package name typosquats swiper/swiper-angular at implausible version 5.9999.1. The preinstall.js script runs at install time and collects installer...