Rocky Linux 9 [CIQ] Security Update: python-urwid-debugsource / python3-urwid / python3-urwid-debuginfo (crlsa-2026_58952)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202658952 advisory. urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure CVE-2026-9323 Tenable has extracted the preceding description block...

Rocky Linux 8 [CIQ] Security Update: python-urwid-debugsource / python3-urwid / python3-urwid-debuginfo (crlsa-2026_58562)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202658562 advisory. urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure CVE-2026-9323 Tenable has extracted the preceding description block...

PT-2026-103870

Name of the Vulnerable Software and Affected Versions boks keytabmd affected versions not specified Description In deployments using BoKS keytab management, the software generates Active Directory service-account passwords using a predictable pseudo-random sequence seeded with the current Unix...

AlmaLinux 9.2 [TuxCare] Security Update: c-ares / c-ares-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1744721593)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1744721593 advisory. - c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARESRANDOMFILE will...

Rocky Linux 9 [CIQ] Security Update: avahi / avahi-autoipd / avahi-autoipd-debuginfo / avahi-compat-howl / etc (crlsa-2025_7437)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257437 advisory. avahi: Avahi Wide-Area DNS Predictable Transaction IDs CVE-2024-52616 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Rocky Linux 10.2 [CIQ] Security Update: python-urwid-debugsource / python3-urwid / python3-urwid-debuginfo (crlsa-2026_58561)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202658561 advisory. urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure CVE-2026-9323 Tenable has extracted the preceding description blo...

AlmaLinux 9.2 [TuxCare] Security Update: edk2-aarch64 / edk2-ovmf / edk2-tools / edk2-tools-doc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1764062286)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764062286 advisory. - EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an...

CVE-2026-102719

Predictable DTLS HelloVerifyRequest Cookie in NetX Secure...

EUVD-2026-89182

Predictable DTLS HelloVerifyRequest Cookie in NetX Secure...

CVE-2026-11107-Insecure-Direct-Object-Reference-with-Predictable-UUIDv1

CVE-2026-11107 – Небезопасная прямая ссылка на объект с предсказуемым UUIDv1 Код программы Python Flask idorserver.py - API with UUIDv1 user IDs import uuid, time from flask import Flask, request, jsonify app = Flaskname Generate predictable UUIDv1 based on timestamp + MAC users = struuid.uuid1:...

cve-2021-38314

CVE-2021-38314 Эксплойт на Python Подробности Плагин Gutenberg Template Library & Redux Framework версии = 4.2.11 для WordPress регистрирует несколько AJAX-действий, доступных неаутентифицированным пользователям в функции includes в файле redux-core/class-redux-core.php. Эти действия уникальны дл...

CVE-2025-69727

CVE-2025-69727 Fournisseur du produit INDEX-EDUCATION Produit affecté code de base PRONOTE - 202X.X.X 2025.2.8 Description Une vulnérabilité de contrôle d'accès incorrect existe dans INDEX-EDUCATION PRONOTE avant la version 2025.2.8. Les composants affectés composeUrlImgPhotoIndividu permettent l...

CVE-2025-63353

CVE-2025-63353 : Vulnérabilité de mot de passe Wi-Fi prévisible dans les appareils GPON ONT de FiberHome Références Basé sur les recherches de Hanianis divulgation originale du CVE à CVE-2025-63353 Remerciements aux chercheurs en sécurité qui ont identifié cette vulnérabilité. Avertissement légal...

CVE-2026-88778

Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23...

CVE-2026-101047 Fleet before 4.87.0 Unauthenticated iOS App Download via Predictable URLs

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests enterprise tier only with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet...

CVE-2026-101047 Fleet before 4.87.0 Unauthenticated iOS App Download via Predictable URLs

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests enterprise tier only with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet...

CVE-2026-101047 Fleet before 4.87.0 Unauthenticated iOS App Download via Predictable URLs

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests enterprise tier only with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet...

CVE-2026-101047

Fleet versions before 4.87.0 are vulnerable to an unauthenticated download of in-house iOS application packages and manifests. The root cause is the failure to implement intended random, time-limited URL tokens for specific endpoints required by Apple's InstallEnterpriseApplication MDM command. A...

Job-Manager-Disclosure

Scanner de Divulgation de Noms de Fichiers CV – CVE-2015-6668 Ce script automatise la recherche de fichiers CV comme .jpg, .png, .jpeg exposés publiquement via la vulnérabilité CVE-2015-6668, liée au plugin WP Job Manager pour WordPress versions ≤ 0.7.25. 🧠 Description La vulnérabilité permet de...

CVE-2026-88778

Citrix NetScaler ADC and NetScaler Gateway are vulnerable to a TCP Initial Sequence Number (ISN) prediction flaw. The issue affects appliances with TCP-based virtual servers (such as HTTP, SSL, or TCP) where Enhanced ISN Generation is disabled. This vulnerability allows for predictable sequence n...