5914 matches found
Astra Linux – Vulnerability in dnsmasq
A single-byte, non-arbitrary write/use-after-free flaw was discovered in dnsmasq. This flaw allows an attacker to send a crafted packet processed by dnsmasq, potentially causing a denial of service...
CLSA-2026-1789379340 TuxCare security update for cryptography (1 CVE)
TuxCare rebuilt cryptography to address 1 CVE. Fixed in 42.0.0.post2+tuxcare...
CLSA-2026-1789373020 TuxCare security update for org.apache.httpcomponents.client5 (1 CVE)
TuxCare rebuilt 5 org.apache.httpcomponents.client5 packages to address 1 CVE. Fixed in 5.3.1-tuxcare.1...
CVE-2026-89723
creationtimestamp| type| source ---|---|--- 2026-09-13 20:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvgf4qveo624 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...
The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/bgp.go file of the GoBGP edge gateway protocol allows a attacker to cause a service failure.
The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/bgp.go file of the GoBGP edge gateway protocol is related to a single-bit offset error. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-84941: Improper Restriction of XML External Entity Reference
An information disclosure vulnerability in the SAML Single Sign-On SSO functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could...
FreeBSD : immich -- locked assets remain accessible through shared albums and links (fcc6917b-adbc-11f1-a655-3497f65b111b)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fcc6917b-adbc-11f1-a655-3497f65b111b advisory. VulnCheck reports: Immich through 3.1.0 fails to properly enforce locked asset visibility when assets a...
CVE-2026-50165
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an organization owner to read system-level configuration secrets through organization/event scoped "single configuratio...
CVE-2026-87806
creationtimestamp| type| source ---|---|--- 2026-09-09 14:07:31+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv3pjnxzam2n 2026-09-10 00:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4rqzto6u24...
SUSE CVE-2026-26232
Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during token exchange...
The vulnerability of the tls_push_record() function in the net/tls/tls_sw.c module of the Linux operating system’s TLS protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the Linux operating system’s TLS implementation is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...
PT-2026-89149
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an organization owner to read system-level configuration secrets through organization/event scoped "single configuratio...
CVE-2026-73311
XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability that allows attackers to obtain unauthorized token pairs by submitting a previously used authorization code. Attackers can exploit the failure to invalidate or mark authorization codes as consumed after initial token...
CLSA-2026-1788874294 TuxCare security update for org.springframework.security:spring-security-oauth2-authorization-server (1 CVE)
TuxCare rebuilt org.springframework.security:spring-security-oauth2-authorization-server to address 1 CVE. Fixed in 1.5.8-tuxcare.1...
EUVD-2026-72782
XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability that allows attackers to obtain unauthorized token pairs by submitting a previously used authorization code. Attackers can exploit the failure to invalidate or mark authorization codes as consumed after initial token...
CVE-2026-73311 XenForo < 2.3.13 OAuth2 Authorization Code Reuse
XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability that allows attackers to obtain unauthorized token pairs by submitting a previously used authorization code. Attackers can exploit the failure to invalidate or mark authorization codes as consumed after initial token...
CVE-2026-79576: Improper Authentication
An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...
PT-2026-87114
An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...
CVE-2026-58240: Use of Single-factor Authentication
SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the affected service could exploit this weakness to register an unauthorized component and potentially...
PT-2026-86617
🚨 HIGH Severity: CVE-2026-86313 CVSS 7.8 Out-of-bounds write flaw in Samsung Opensource Walrus enables buffer overflow attacks. Local exploit, no privileges required. Affected: Walrus commit af80e665ea CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/6XjdaUNUYK...