5223438 matches found
web-attack-log-analyzer
Web Server Log Analyzer — Web Attack Detection A Python tool...
CVE-2026-79312
A flaw was found in webpy. The session component reads the session identifier from the request cookie and reuses it across authentication state changes without ever rotating it. This allows a pre-authentication session identifier to persist into the authenticated session, enabling an attacker who...
CVE-2026-79311
A flaw was found in webpy. The renderjinja template adapter does not enable automatic HTML escaping when initializing the Jinja2 environment. Applications using this adapter that render user-controlled data in templates are vulnerable to cross-site scripting XSS. Mitigation Mitigation for this...
sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization
A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: sudo: sudo-1.9.17-16.p2.2.hum1 aarch64, x8664 sudo-devel-1.9.17-16.p2.2.hum1 aarch64, x8664 sudo-logsrvd-1.9.17-16.p2.2.hum1 aarch64, x8664 sudo-python-plugin-1.9.17-16.p2.2.hum1 aarch64, x8664...
USN-8813-1: Expat vulnerabilities
It was discovered that Expat did not correctly handle certain integer arithmetic. An attacker could possibly use this issue to cause a denial of service. CVE-2026-56406, CVE-2026-56407, CVE-2026-56409, CVE-2026-56410, CVE-2026-56411 It was discovered that Expat did not correctly track handler cal...
USN-8813-1 expat vulnerabilities
It was discovered that Expat did not correctly handle certain integer arithmetic. An attacker could possibly use this issue to cause a denial of service. CVE-2026-56406, CVE-2026-56407, CVE-2026-56409, CVE-2026-56410, CVE-2026-56411 It was discovered that Expat did not correctly track handler cal...
New Browser Guard features add protection before and after you click
Most of us click on search results without knowing much about the website we’re about to visit. And once we’re there, it’s not always obvious when something isn’t quite right. Now, we’ve added two new features to Malwarebytes Browser Guard that will do even more to keep you safe online. Search...
USN-8814-1: Octavia vulnerabilities
It was discovered that Octavia did not properly validate TLS cipher string fields in the Amphora provider driver. An authenticated attacker who owns a TLS-enabled load balancer could possibly use this issue to inject arbitrary HAProxy configuration directives. CVE-2026-94572 It was discovered tha...
USN-8814-1 octavia vulnerabilities
It was discovered that Octavia did not properly validate TLS cipher string fields in the Amphora provider driver. An authenticated attacker who owns a TLS-enabled load balancer could possibly use this issue to inject arbitrary HAProxy configuration directives. CVE-2026-94572 It was discovered tha...
CGA-GJ8J-C89R-MFG8
Bulletin has no description...
CGA-29VM-C4HM-W3CX
Bulletin has no description...
CGA-39H2-QH7X-CRG8
Bulletin has no description...
CGA-8545-FMR6-RJ46
Bulletin has no description...
CGA-V795-557X-C52G
Bulletin has no description...
CGA-C28J-9QV6-XR6V
Bulletin has no description...
CGA-236J-4PQX-6FPG
Bulletin has no description...
CGA-2544-6W37-C23C
Bulletin has no description...