1421258 matches found
PT-2026-72080
A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account...
PT-2026-72059
A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific configuration file could achieve arbitrary code execution with elevated privileges, without requiring further user or victim interaction...
PT-2026-72057
A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized...
PT-2026-72079
An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system...
Oracle Linux 9 : .NET / 8.0 (ELSA-2026-54574)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54574 advisory. 8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 Tenable has extracted t...
RockyLinux 8 : .NET 8.0 (RLSA-2026:54538)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54538 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...
Oracle Linux 10 : .NET / 8.0 (ELSA-2026-54541)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54541 advisory. 8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 Tenable has extracted...
Oracle Linux 10 : .NET / 9.0 (ELSA-2026-54590)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54590 advisory. 9.0.120-1.0.1 - Add support for Oracle Linux 9.0.120-1 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 Tenable has extracted...
google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 :path pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed :path that omits the mandato...
CVE-2026-72851
creationtimestamp| type| source ---|---|--- 2026-08-13 23:00:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msyqp4lx6j2j 2026-08-14 03:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117091626314475860 2026-08-14 03:00:29+00:00| seen|...
CVE-2026-72850
creationtimestamp| type| source ---|---|--- 2026-08-13 23:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msyqp3ayiz2m 2026-08-14 03:01:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msz66wwti42b 2026-08-14 04:30:27+00:00| seen|...
CVE-2026-72841
creationtimestamp| type| source ---|---|--- 2026-08-13 22:50:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msyq56elrd2u 2026-08-14 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117093395688600672 2026-08-14 10:30:27+00:00| seen|...
[slackware-security] rsync
New rsync packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/rsync-3.5.0-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues. For more information, see:...
CVE-2026-73663
creationtimestamp| type| source ---|---|--- 2026-08-13 22:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msyozht35o25 2026-08-15 13:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt4rrnxe7j2y...
CVE-2026-73421
creationtimestamp| type| source ---|---|--- 2026-08-13 22:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msyohjsrxs2t 2026-08-14 00:00:37+00:00| seen| https://infosec.exchange/users/offseq/statuses/117090919143371675 2026-08-14 00:00:39+00:00| seen|...
CVE-2026-68454
creationtimestamp| type| source ---|---|--- 2026-08-13 22:13:27+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117090497824636365...
CVE-2026-18071
creationtimestamp| type| source ---|---|--- 2026-08-13 22:00:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msynetfxqd2z...
Malicious code in @secauditb20y/sec-test-r3b (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7034b94531c8be5e9141c7a5cf73f552486c1b307672346a0e646e60207b7c package.json declares a postinstall script that runs node -e to invoke fs.writeFileSync, creating /tmp/PWNR3REAL/FIRED on the installer's machine whe...
CVE-2026-19297
creationtimestamp| type| source ---|---|--- 2026-08-13 21:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msyl4c6onl2e 2026-08-13 22:41:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fdnranjkik2zs...
