ALSA-2026:38901 Important: perl-DBI:1.641 security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: DBI: DBI: Buffer overflow in...

PT-2026-59576

Summary The list files tool in FileTools validates the directory parameter against workspace boundaries via validate path, but passes the pattern parameter directly to Path.glob without any validation. Since Python's Path.glob supports .. path segments, an attacker can use relative path traversal...

PT-2026-59899

Impact If tf.raw ops.TensorListResize is given a nonscalar value for input size, it results CHECK fail which can be used to trigger a denial of service attack. python import numpy as np import tensorflow as tf a = data structures.tf tensor list newelements = tf.constantvalue=3, 4, 5 b = np.zeros0...

ROS-20260713-73-0011

The vulnerability is related to a lack of mechanisms for verifying the source of information. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

ALSA-2026:38501 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows...

Fedora 43 : attr (2026-b85570f8e4)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b85570f8e4 advisory. rebase to v2.6.0 to fix CVE-2026-54371 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

ROS-20260713-73-0026

The vulnerability of the tarfile module in the Python programming language is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

BIT-AIRFLOW-2026-48892 Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options

The Config API in Apache Airflow surfaced per-key secrets-backend overrides environment variables like AIRFLOWSECRETSBACKENDKWARGSECRETID and AIRFLOWWORKERSSECRETSBACKENDKWARGSECRETID as synthetic config options whose option names were not in sensitiveconfigvalues, so the masker did not redact...

CVE-2020-3961

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:18+00:00| seen| https://t.me/pleyadesit/6702 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/6702 2026-07-14 00:00:49+00:00| seen| https://t.me/pleyadesit/6702...

CVE-2026-15506 SecureAge CatchPulse Driver saappctl.sys heap-based overflow

A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been...

CVE-2026-10667

creationtimestamp| type| source ---|---|--- 2026-07-12 17:37:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhpq4dedf2a 2026-07-12 18:00:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqhqznqyim2i 2026-07-12 19:37:23+00:00| seen|...

CVE-2026-15501

creationtimestamp| type| source ---|---|--- 2026-07-12 13:27:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhbqvz6lj2a 2026-07-12 13:33:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqhc3qfqzv24 2026-07-12 17:18:02+00:00| seen|...

CVE-2026-56271

creationtimestamp| type| source ---|---|--- 2026-07-12 12:33:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6qvmwwo2y 2026-07-12 12:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqh7hpkdws2f 2026-07-12 12:54:26+00:00| seen|...

CVE-2026-15500

creationtimestamp| type| source ---|---|--- 2026-07-12 12:29:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6jg6l6222...

EUVD-2026-43236

LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent network attackers to inject HTML markup. Attackers can send a DHCPv6 Client FQDN containing script tags that execute in the administrator's browser when viewing DHCP lease pages...

CVE-2026-15492

creationtimestamp| type| source ---|---|--- 2026-07-12 11:32:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh3dnogvd2c...

CVE-2026-15492

A security vulnerability has been detected in igweze wizgrade up to b1d55f22b90cd7e7a6e5002f006d7c649e8086d6. This vulnerability affects unknown code of the file dashboard/studentConductManager.php. Such manipulation leads to cross site scripting. The attack may be performed from remote. The...

CVE-2026-15489

creationtimestamp| type| source ---|---|--- 2026-07-12 09:30:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqgujahjm22y 2026-07-12 11:42:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh3wvvacr24...

CVE-2026-15485

creationtimestamp| type| source ---|---|--- 2026-07-12 08:31:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqgr7yo3wh27 2026-07-12 11:32:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh3ez2kjy2w 2026-07-12 12:15:03+00:00| seen|...

CVE-2026-15481

creationtimestamp| type| source ---|---|--- 2026-07-12 06:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqgisf5b4s23 2026-07-12 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116905477743159401 2026-07-12 06:51:14+00:00| seen|...