D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

Openfire Administration Console - Authentication Bypass

Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup...

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

CVE-2020-15115

creationtimestamp| type| source ---|---|--- 2026-07-27 00:52:05+00:00| seen| https://gist.github.com/tu-trinh-scale/61d61ae8e744f7add790c317f94b5540 2026-07-27 00:52:06+00:00| seen| https://gist.github.com/tu-trinh-scale/2134fa4233992263562231dfecbd2046 2026-07-27 00:52:06+00:00| seen|...

Xerox Phaser 4622 Out-of-bounds Write (CVE-2021-37354)

Xerox Phaser 4622 v35.013.01.000 was discovered to contain a buffer overflow in the function sub3226AC via the TIMEZONE variable. This vulnerability allows attackers to cause a Denial of Service DoS via crafted overflow data. This plugin only works with Tenable.ot. Please visit...

RockyLinux 9 : libpq (RLSA-2026:44308)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:44308 advisory. postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory CVE-2026-6477 Tenable has extracted the preceding...

ALSA-2026:46532 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-2003)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2003 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600 Tenable has extracted the preceding description block directly...

Moderate Photon OS Security Update - PHSA-2026-5.0-0931

Updates of 'harfbuzz' packages of Photon OS have been released...

RHEL 8 : libreswan (RHSA-2026:46396)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:46396 advisory. Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide...

openSUSE 16: java-17-openjdk / java-17-openjdk-demo / java-17-openjdk-devel / etc (openSUSE-SU-2026:21440-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21440-1 advisory. This update for java-17-openjdk fixes the following issues - Upgrade to upstream tag jdk-17.0.20+8 July 2026 CPU - CVE-2026-41254: Information...

CVE-2026-17457

creationtimestamp| type| source ---|---|--- 2026-07-26 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116986519647056381 2026-07-26 13:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrkihxzwv32t...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nginx: nginx-1.30.4-2.hum1 aarch64, x8664 nginx-all-modules-1.30.4-2.hum1 noarch nginx-core-1.30.4-2.hum1 aarch64, x8664 nginx-filesystem-1.30.4-2.hum1 noarch nginx-mod-devel-1.30.4-2.hum1 aarch6...

RHSA-2026:32991 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

CISCO-SA-20170405-AME

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:07+00:00| seen| https://t.me/KaitNews/3896 2026-07-27 00:01:47+00:00| seen| https://t.me/KaitNews/3896...

CVE-2017-3883

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:59+00:00| seen| https://t.me/KaitNews/5736 2026-07-27 00:01:41+00:00| seen| https://t.me/KaitNews/5736...

CVE-2017-13091

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:57+00:00| seen| https://t.me/KaitNews/6243 2026-07-27 00:01:39+00:00| seen| https://t.me/KaitNews/6243 2026-07-29 07:00:09+00:00| seen| https://t.me/KaitNews/6243 2026-07-30 00:03:11+00:00| seen| https://t.me/KaitNews/6243...

CVE-2017-13704

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:56+00:00| seen| https://t.me/KaitNews/6804 2026-07-27 00:01:37+00:00| seen| https://t.me/KaitNews/6804 2026-07-29 06:00:05+00:00| seen| https://t.me/KaitNews/6804 2026-07-30 00:03:14+00:00| seen| https://t.me/KaitNews/6804...

CVE-2026-64530

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Handle TCACTCONSUMED in tcfqeventhandle tcfclassify can return TCACTCONSUMED while the skb is held by the defragmentation engine e.g. actct on out-of-order fragments. When that happens the skb is no longer owne...

CVE-2026-63720

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded newlines and a dot-free Python expression. The crafted value ...