Important: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 security advisory

An update for etcd, collectd-sensubility and collectd-libpod-stats is now available for Red Hat OpenStack Platform 17.1 Wallaby for Red Hat Enterprise Linux RHEL 9.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVS...

CVE-2026-110475

This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating authentication requests and accessing APIs without a val...

ROOT-APP-PYPI-CVE-2026-54277 CVE-2026-54277 in aiohttp - Patched by Root

Root has patched CVE-2026-54277 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

CVE-2026-110475 Improper Authentication Vulnerability in CreditNirvana Collections Platform

This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating authentication requests and accessing APIs without a val...

CVE-2026-110475 Improper Authentication Vulnerability in CreditNirvana Collections Platform

This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating authentication requests and accessing APIs without a val...

EUVD-2026-109788

This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating authentication requests and accessing APIs without a val...

CVE-2026-110475

The CreditNirvana Collections Platform is vulnerable to an improper authentication and authorization flaw within its platform login service. An unauthenticated remote attacker can manipulate authentication requests to access APIs without a valid session. Successful exploitation allows the attacke...

Detect-CVE-2017-15361-TPM

Detect Trusted Platform Modules Vulnerable to CVE-2017-15361 This repository provides content for aiding DoD administrators in detecting systems that have an enabled Trusted Platform Module TPM that is vulnerable to CVE-2017-15361 and is a companion to Information Assurance Advisory RSA Key...

ServiceNow - Incomplete Input Validation

ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addresse...

Transactions Platform Component Access Protected Information

The vulnerability in the Transactions Platform component of Google Chrome and Microsoft Edge web browsers is related to information disclosure. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

CreditNirvana Collections Platform authorization issue vulnerability

Versions prior to 4.8.2 of the CreditNirvana Collections Platform contain an authorization issue vulnerability. This vulnerability stems from improper authentication and authorization controls within the platform’s login service. Unauthenticated remote attackers can manipulate authentication...

RHEL 9 : Red Hat OpenStack Platform 17.1 security advisory (Important) (RHSA-2026:90329)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90329 advisory. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service...

Google Chrome Microsoft Edge DoS

The vulnerability in the Platform component of Google Chrome and Microsoft Edge web browsers is related to use-after-free memory usage. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

PT-2026-123298

This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating authentication requests and accessing APIs without a val...

CVE-2025-32429

CVE-2025-32429 XWiki SQL Injection PoC Author: Byte Reaper Telegram: @ByteReaper0 CVE: CVE‑2025‑32429 Vulnerability: Blind SQL Injection in XWiki LiveData REST API Affected File: getdeleteddocuments.vm sort parameter Description : A blind SQL Injection vulnerability exists in XWiki Platform’s...

Mirage

Mirage OSINT Platform Mirage is an open-source intelligence OSINT platform built as a microservice architecture. It provides a scalable and extensible framework for collecting, analyzing, and visualizing intelligence data from various sources. Architecture Mirage is built using a microservice...

tink

Tink NOTE : Tink moved to github.com/tink-crypto and this repo is no longer active! As planned, we have split Tink into multiple GitHub repositories that are hosted at github.com/tink-crypto. As a consequence, we made this repository read-only and it is not going to be maintained moving forward. ...

Parse Platform Parse Server input validation error vulnerability

Versions prior to Parse Platform Parse Server 8.6.100 and versions from 9.0.0 through 9.10.4-alpha.3 contain an input validation error vulnerability. This vulnerability arises from the failure to reject writes to reserved internal field names within client objects; as a result, clients can store ...

Parse Platform Parse Server authorization issue vulnerability

Versions prior to Parse Platform Parse Server 8.6.101 and versions from 9.0.0 up to 9.10.4-alpha.4 contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks in MongoDB deployments. Unauthenticated attackers can send delete requests to the internal...

Parse Platform Parse Server information disclosure vulnerability

Versions prior to Parse Platform Parse Server 8.6.103 and versions from 9.0.0 through 9.10.5-alpha.4 contain an information disclosure vulnerability. This vulnerability arises because LiveQuery’s subscription hash fails to respect constraints surrounding the $or operator, including the Session...