FreeBSD : gstreamer1 -- multiple vulnerabilities (6eee35e6-fca5-4db2-ab73-f27add3e3ef1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6eee35e6-fca5-4db2-ab73-f27add3e3ef1 advisory. The GStreamer project reports: Multiple security issues were identified and fixed in the...

Debian dla-4699 : hpijs-ppds - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4699 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4699-1 [email protected]...

Fedora 43 : libreswan (2026-146b86f436)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-146b86f436 advisory. Update to 5.3.2 for CVE-2026-14957 with newsources Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

Debian dla-4700 : linux-config-6.1 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4700 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4700-1 [email protected]...

Linux Distros Unpatched Vulnerability : CVE-2026-14899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single...

FreeBSD : unbound -- multiple vulnerabilities (f63b4b88-6901-4c12-b13d-5a821e25e9bf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f63b4b88-6901-4c12-b13d-5a821e25e9bf advisory. NLnet Labs reports: This release consolidates security fixes for issues reported over a period...

Fedora 43 : webkitgtk (2026-ec8e535c6e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ec8e535c6e advisory. Fire scrollend event for instant programmatic scrolls. Increase network idle connection timeout to 115 seconds. Fix several crashes and rendering...

MAL-2026-11066 Malicious code in @ks-radar/radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 24bbd0f16f929682cd413abde1e40578db9fa5b2ad8cb7cdc9927c70f5f5f710 The OpenSSF Package Analysis project identified '@ks-radar/radar' @ 22.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @ks-radar/radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 24bbd0f16f929682cd413abde1e40578db9fa5b2ad8cb7cdc9927c70f5f5f710 The OpenSSF Package Analysis project identified '@ks-radar/radar' @ 22.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in blessclient (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cce3c8791da7093bb0d6aaf8b79f49e5cbbcc4114f075f60121fc99b31c74e09 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-11067 Malicious code in blessclient (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cce3c8791da7093bb0d6aaf8b79f49e5cbbcc4114f075f60121fc99b31c74e09 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Exploit for Deserialization of Untrusted Data in Dataease

DataEase — Unauthenticated RCE via a 4-vulnerability chain CV...

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

A malvertising operation dubbed SourTrade is making victims' browsers build the final Windows executable themselves, using a legitimate Bun runtime as its base instead of serving one complete malicious file from a fixed URL. Confiant, which detailed the campaign on July 23, 2026, said it has...

Exploit for Out-of-bounds Write in Watchguard Fireware

watchguard-CVE-2025-9242 Authorized-use tooling for WatchGuar...

MGASA-2026-0297 Updated vorbis-tools package fixes a security vulnerability

The updated package fixes a security vulnerability: A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input,...

MGASA-2026-0300 Updated wget packages fix security vulnerabilities

Updated wget packages fix security vulnerabilities: -CVE-2026-58469 Wget incorrectly handled Metalink documents containing a whitespace-only URL. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Mageia 9 and Mageia 10. -CVE-2026-58470 : Wget...

MGASA-2026-0295 Updated giflib packages fix a security vulnerability

The updated packages fix a security vulnerability: Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size. CVE-2026-26740...

Updated giflib packages fix a security vulnerability

The updated packages fix a security vulnerability: Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size. CVE-2026-26740...

Updated vorbis-tools package fixes a security vulnerability

The updated package fixes a security vulnerability: A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input,...

Updated wget packages fix security vulnerabilities

Updated wget packages fix security vulnerabilities: -CVE-2026-58469 Wget incorrectly handled Metalink documents containing a whitespace-only URL. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Mageia 9 and Mageia 10. -CVE-2026-58470 : Wget...