[SECURITY] [DLA 4879-1] strongswan security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4879-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley November 02, 2026 https://wiki.debian.org/LTS -...

Exploit for Improper Encoding or Escaping of Output in Synology Beestation_Os

Synology DSM Vulnerability Detection Scanner This is a scanne...

CVE-2023-0214

SWG Exploit Generator ██████╗ ██████╗ ████████╗███████╗ ██╔═████╗██╔══██╗╚══██╔══╝██╔════╝ ██║██╔██║██████╔╝ ██║ ███████╗ ████╔╝██║██╔═══╝ ██║ ╚════██║ ╚██████╔╝██║ ██║ ███████║ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ by 0PTS Proof of Concept for the HTTP Response Splitting vulnerability in Skyhigh Secure Web...

CVE-2018-14716

CVE-2018-14716 PoC for CVE-2018-14716 Exploit Title: Craft CMS SEOmatic plugin 3.1.4 - Server-Side Template Injection Date: 2018-07-20 Software Link: https://github.com/nystudio107/craft-seomatic Exploit Author: Sebastian Kriesten 0xB455 Contact: https://twitter.com/0xB455 CVE: CVE-2018-14716...

Malware in atlassian-wallboard-plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2026-114715

A flaw was found in Roundcube Webmail. This vulnerability allows an authenticated remote user to take over another account through unauthorized password modification. When a password change is requested, the Modoboa driver in the password plugin selects the first account returned by the API searc...

CLSA-2026-1793616631 TuxCare security update for @babel/plugin-proposal-object-rest-spread (2 CVEs)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1793616629 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

CLSA-2026-1793616628 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.12.5-tuxcare.2...

CLSA-2026-1793616625 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.14.8-tuxcare.2...

CLSA-2026-1793616627 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.12.18-tuxcare.3...

CLSA-2026-1793616626 TuxCare security update for @babel/plugin-proposal-object-rest-spread (2 CVEs)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

CLSA-2026-1793616623 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1793616624 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1793616621 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1793616619 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

CLSA-2026-1793616620 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

WordPress s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin <= 260927 - Unauthenticated Remote Code Execution vulnerability

Unauthenticated Remote Code Execution vulnerability discovered by khanhnv in WordPress Plugin s2Member versions = 260927...

CVE-2026-117518 @fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape

@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP server. In versions up to and including 12.8.0, the plugin validated proxy paths against forward-slash dot-segments only and then built the target with the WHATWG URL parser, which normalizes a backslash and its...

Important: Red Hat Security Advisory: gimp security update

An update for gimp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...