[SECURITY] Fedora 44 Update: kf6-knotifications-6.25.0-1.fc44

KDE Frameworks 6 Tier 3 solution with abstraction for system notifications...

[SECURITY] Fedora 44 Update: kf6-kio-6.25.0-1.fc44

KDE Frameworks 6 Tier 3 solution for filesystem abstraction...

[SECURITY] Fedora 44 Update: kf6-knewstuff-6.25.0-1.fc44

KDE Frameworks 6 Tier 3 module for downloading and sharing additional application data like plugins, themes, motives, etc...

[SECURITY] Fedora 44 Update: kf6-ki18n-6.25.0-1.fc44

KDE Frameworks 6 Tier 1 addon for localization...

[SECURITY] Fedora 44 Update: kf6-kdnssd-6.25.0-1.fc44

KDE Frameworks 6 Tier 1 integration module for DNS-SD services Zeroconf...

[SECURITY] Fedora 44 Update: kf6-kdeclarative-6.25.0-1.fc44

KDE Frameworks 6 Tier 3 addon for Qt declarative...

[SECURITY] Fedora 44 Update: kf6-kglobalaccel-6.25.0-1.fc44

KDE Frameworks 6 Tier 3 integration module for global shortcuts...

[SECURITY] Fedora 44 Update: kf6-kcontacts-6.25.0-1.fc44

The KContacts Library...

[SECURITY] Fedora 44 Update: kf6-6.25.0-1.fc44

Filesystem and RPM macros for KDE Frameworks 6...

[SECURITY] Fedora 44 Update: kf6-karchive-6.25.0-1.fc44

KDE Frameworks 6 Tier 1 addon with archive functions...

[SECURITY] Fedora 44 Update: kf6-kauth-6.25.0-1.fc44

KDE Frameworks 6 module to perform actions as privileged user...

[SECURITY] Fedora 44 Update: kdeplasma-addons-6.6.4-1.fc44

Additional Plasmoids for Plasma 6...

BIT-DJANGO-2026-4292 Privilege abuse in ModelAdmin.list_editable

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using ModelAdmin.listeditable incorrectly allowed new instances to be created via forged POST data. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...

CVE-2026-40260 pypdf: Manipulated XMP metadata entity declarations can exhaust RAM

pypdf is a free and open-source pure-python PDF library. In versions prior to 6.10.0, manipulated XMP metadata entity declarations can exhaust RAM. An attacker who exploits this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the XMP metadata. This issue has...

CVE-2026-40260

pypdf is a free and open-source pure-python PDF library. In versions prior to 6.10.0, manipulated XMP metadata entity declarations can exhaust RAM. An attacker who exploits this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the XMP metadata. This issue has...

CVE-2026-40260 pypdf: Manipulated XMP metadata entity declarations can exhaust RAM

pypdf is a free and open-source pure-python PDF library. In versions prior to 6.10.0, manipulated XMP metadata entity declarations can exhaust RAM. An attacker who exploits this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the XMP metadata. This issue has...

Memory Allocation with Excessive Size Value

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the FlateDecode image processing when handling images with large size values. An...

CVE-2026-37750

creationtimestamp| type| source ---|---|--- 2026-04-16 20:03:02+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/80599 2026-04-16 23:00:12+00:00| published-proof-of-concept| Telegram/PUhI2lkS-h7Gd8doCgJYvIQ2cmMQwA3P2d3rONukexeeEE 2026-04-17 09:00:04+00:00| published-proof-of-concept|...

Attackers Actively Exploiting Critical Vulnerability in Ninja Forms – File Upload Plugin

On April 6th, 2026, we publicly disclosed a critical Arbitrary File Upload vulnerability in Ninja Forms – File Upload, a WordPress plugin with an estimated 50,000 active installations. This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary files, including PHP...

CVE-2026-41080

CVE-2026-41080 affects libexpat prior to 2.7.6, where insufficient entropy in the hash function allows hash flooding when processing crafted XML documents. The CVE is broadly referenced across OSV, Debian, Red Hat, and Ubuntu entries, with the core impact described as a potential DoS due to resou...