CVE-2026-23318 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23318 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corrupti...

EUVD-2026-17095

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.21.1

The 1.21.1 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.21.1 release of Red Hat OpenShift Pipelines Operator...

kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsitdecsessionusagecount In iscsitdecsessionusagecount, the function calls complete while holding the sess-sessionusagelock. Similar to the connection usage count logic, the waiter...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.21.1

The 1.21.1 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.21.1 release of Red Hat OpenShift Pipelines Operator...

Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools

This update fixes the following issues: spacecmd: Version 5.2.6-0 Update translation strings uyuni-tools: Version 5.2.5-0 Remove migrate command Remove template script from mgradm: use the one in the image Split the TFTP server into a separate container Explicitly start proxy pods after operation...

RegPwnBOF

🛡️ RegPwnBOF - Simple Registry Action Tool !Download RegPwn...

[SECURITY] Fedora 44 Update: libsoup3-3.6.6-6.fc44

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

The vulnerability of the alloc_ns() function in the security/apparmor/policy_ns.c module of the AppArmor security component for Linux kernel allows a attacker to cause a service failure.

The vulnerability of the allocns function in the security/apparmor/policyns.c file of the AppArmor security component of the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the ov5648_remove() function in the drivers/media/i2c/ov5648.c driver for multimedia devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ov5648remove function in the drivers/media/i2c/ov5648.c file of the Linux multimedia device driver module is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the admac_terminate_all() function in the drivers/dma/apple-admac.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the admacterminateall function in the drivers/dma/apple-admac.c file of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the wx_setup_rx_resources() function in the drivers/net/ethernet/wangxun/libwx/wx_lib.c file of the Linux kernel-based Ethernet network adapter driver allows a hacker to cause a service failure.

The vulnerability of the wxsetuprxresources function in the drivers/net/ethernet/wangxun/libwx/wxlib.c file of the Linux kernel’s Ethernet network adapter driver is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

freerdp security update

2:2.11.7-4 - Backport several CVE fixes Resolves: RHEL-151979, RHEL-152206...

PT-2026-29029

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...

CVE-2026-30082

IngEstate Server v11.14.0 is vulnerable to multiple stored cross-site scripting (XSS) vulnerabilities within the Edit feature of the Software Package List page. The root cause is the improper neutralization of input, specifically via the About application , What's news , or Release note parameter...

PT-2026-29117

Name of the Vulnerable Software and Affected Versions CI4MS versions prior to 0.31.0.0 Description CI4MS, a CodeIgniter 4-based CMS skeleton, does not properly sanitize user-controlled input within System Settings – Mail Settings. Configuration fields, including Mail Server, Mail Port, Email...