MINI-R66R-XGJP-6QXM

Bulletin has no description...

CVE-2026-67622: Authorization Bypass Through User-Controlled Key

Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration that allows authenticated attackers to access credentials belonging to other workspaces by supplying an arbitrary credential UUID to Assistants endpoints without workspace ownersh...

gpsd security update

3.26.1-3.0.1.el102.1 - Replace upstream reference Orabug: 37033219 1:3.26.1-3.el102.1 - fix command injection in gpsprof CVE-2026-58459...

kernel security, bug fix, and enhancement update

4.18.0-553.153.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

RHEL 10 : libXfont2 (RHSA-2026:51061)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51061 advisory. X.Org X11 libXfont2 runtime library Security Fixes: libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001...

PT-2026-68680

Name of the Vulnerable Software and Affected Versions Amazon Strands Agents Tools versions prior to 0.8.3 Description An insecure direct object reference exists in the mongodb memory, elasticsearch memory, and mem0 memory tools. Remote authenticated users can access, modify, or delete memories...

kernel security, bug fix, and enhancement update

6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

kernel security, bug fix, and enhancement update

6.12.0-211.43.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

CVE-2026-65601

creationtimestamp| type| source ---|---|--- 2026-08-05 22:35:12+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj 2026-08-05 23:31:11+00:00| seen| https://gist.github.com/alon710/55629b813908ae24f1e292f2b3f6a8d5 2026-08-06 00:00:17+00:00...

GHSA-QQ9Q-X9W4-CHHJ Traefik Gateway API HTTPRoute BackendRef ExtensionRef Namespace Confusion

Summary There is a medium-severity namespace-confusion vulnerability in Traefik's Kubernetes Gateway API provider. When resolving HTTPRoute.spec.rules.backendRefs.filters.extensionRef, Traefik used the backend Service namespace instead of the HTTPRoute namespace. A low-privileged route author...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through improper namespace resolution in the extensionRef process. An attacker can cause unauthorized middleware from a backend namespace to be bound to a route by crafting a malicious HTTPRoute with...

Traefik Gateway API HTTPRoute BackendRef ExtensionRef Namespace Confusion

Summary There is a medium-severity namespace-confusion vulnerability in Traefik's Kubernetes Gateway API provider. When resolving HTTPRoute.spec.rules.backendRefs.filters.extensionRef, Traefik used the backend Service namespace instead of the HTTPRoute namespace. A low-privileged route author...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through improper namespace resolution in the extensionRef process. An attacker can cause unauthorized middleware from a backend namespace to be bound to a route by crafting a malicious HTTPRoute with...

MINI-MW7V-VX24-PMQP

Bulletin has no description...

MINI-785M-H6MW-543V

Bulletin has no description...

MINI-3VP3-CFXG-F275

Bulletin has no description...

MINI-HHPP-WJ3F-5G6M

Bulletin has no description...

MINI-W4FH-3C4C-44H2

Bulletin has no description...

MINI-GGG7-488P-99GX

Bulletin has no description...

Malware in tinkoff-fb-fieldset-car-reference-kasko

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...