PT-2026-61704

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.27.0 Description Gitea allows a token with public-only,write:repository restrictions to update a private pull request head branch. This occurs because the system validates the token's public-only restriction against t...

SUSE SLED15: libxml2-2 / libxml2-2-32bit / libxml2-devel / libxml2-tools / etc (SUSE-SU-2026:3097-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3097-1 advisory. This update for libxml2 fixes the following issue - CVE-2026-11979: stack-based buffer overflows in the xmlcatalog...

chronoforms

A new update is now available: https://www.chronoengine.com/downloads/chronoforms/chronoforms-v8/chronoforms-v8-joomla-extension The affected range should be any version before v8.0.53 Best regards, Max & the ChronoEngine.com Team...

Oracle Linux 10 : glib2 (ELSA-2026-19148)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19148 advisory. 2.80.4-13 - Fix CVE-2025-14087 and CVE-2025-14512 Tenable has extracted the preceding description block directly from the Oracle Linux security...

[SECURITY] Fedora 44 Update: python-bcrypt-4.3.0-14.fc44

Modern password hashing for your software and your servers...

Oracle Linux 9 : cifs-utils (ELSA-2026-39576)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39576 advisory. 7.6-2 - resolves: RHEL-192982 - fix krb5 mount regression 7.6-1 - Update to version 7.6 - resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spneg...

(Pwn2Own) Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of software updates. The issue...

Oracle Linux 10 : grafana (ELSA-2026-19027)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19027 advisory. 10.2.6-25 - Resolves RHEL-158484: CVE-2026-25679 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

SUSE SLED15 / SLES15 Security Update : python-urllib3 (SUSE-SU-2026:2854-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2854-1 advisory. This update for python-urllib3 fixes the following issue - egression introduced by CVE-2025-66471 fix during file...

python-multipart affected by Denial of Service via large multipart preamble or epilogue data

SummaryA denial of service vulnerability exists when parsing crafted multipart/form-data requests with large preamble or epilogue sections. DetailsTwo inefficient multipart parsing paths could be abused with attacker-controlled input.Before the first multipart boundary, the parser handled leading...

RHSA-2026:37250 Red Hat Security Advisory: libreoffice security update

Bulletin has no description...

TencentOS Server 4: grafana (TSSA-2026:0525)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0525 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

RHSA-2026:36315 Red Hat Security Advisory: python3.14-pip security update

Bulletin has no description...

[SECURITY] Fedora 44 Update: rust-busd-0.5.0-3.fc44

A D-Bus bus broker implementation...

[SECURITY] Fedora 43 Update: python-jupyter-server-2.20.0-1.fc43

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila...

c3p0-0.14.1-1.1 on GA media (moderate)

c3p0-0.14.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11166-1 Rating: moderate Cross-References: CVE-2026-55223 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the c3p0-0.14.1-1.1...

RHSA-2026:33552 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

PT-2026-54783

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based versions prior to 149.0.4022.98 Description A use-after-free issue exists in Microsoft Edge Chromium-based. This flaw allows an authorized attacker to execute arbitrary code over a network. Use-after-free is a...

HPESBNW05078 rev.1 - HPE Telco Service Orchestrator Software, Privilege Escalation to Filesystem Read-Access via Automatic ConfigProvider

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator Prior to v5.3.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-31141 |...

vulnerabilities found in Apple MacOS

Apple has addressed several vulnerabilities in macOS Tahoe. These vulnerabilities included out-of-bounds access, use-after-free errors, memory handling issues, type confusion, double-free operations, stack overflows, insufficient input validation, and race conditions. These vulnerabilities could...