JLSEC-2026-1086 libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow...

libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2ciphercrypt function in src/openssl.c that allows a malicious SSH server to crash any connecting client by negotiating AES-GCM ciphers during handshake. Attackers can exploit...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.67 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.67 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

Information Exposure

Overview sglang is a SGLang is a fast serving framework for large language models and vision language models. Affected versions of this package are vulnerable to Information Exposure via the /serverinfo endpoint when only the --admin-api-key is configured. An attacker can obtain sensitive API key...

EUVD-2026-51265

SGLang contains a credential leakage vulnerability in the /serverinfo endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured...

CVE-2026-15977

The SGLang framework (specifically versions >=0.1.26,

CVE-2026-55953

A flaw was found in the Erlang/OTP ssl client. This vulnerability allows an on-path attacker to bypass server authentication in TLS 1.2 and earlier and DTLS connections. By tricking the client into accepting an unoffered anonymous cipher suite, the attacker can complete the handshake without a...

PT-2026-76549

It was discovered that OpenSSL incorrectly allocated memory buffers in the SSL/TLS state machine when receiving handshake data. A remote attacker could possibly use this issue to cause OpenSSL to consume excessive memory, leading to a denial of service. This issue is known as the "HollowByte"...

CVE-2026-15977: Insufficiently Protected Credentials

SGLang contains a credential leakage vulnerability in the /serverinfo endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured...

CVE-2026-41714

A flaw was found in Spring AMQP. Applications that configure their broker connection using RabbitConnectionFactoryBean.setUri"amqps://..." without explicitly enabling SSL via setUseSSLtrue may establish a TLS Transport Layer Security encrypted connection without proper certificate validation or...

web-check v2.2.0

Web-Check Comprehensive, on-demand open source intelligence for any website 🌐web-check.xyz Kindly supported by: Terminal Trove The $HOME of all things in the terminal | Warp Built for coding with multiple AI agents ---|--- Contents About Screenshot Live Demo Mirror Features Usage Deployment...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +926 more potentially affected by CVE-2026-56822 via io.netty:netty-handler-ssl-ocsp (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-handler-ssl-ocsp MAVEN version =4.2.0.final, =4.2.15.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-handler-ssl-ocsp and may be impacted: - ai.catboost:catboost-spark4.02.13 1.2.10 - ai.catboost:catboost-spark4.12.1...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.catboost:catboost-spark_3.4_2.12 (>=1.2, <=1.2.10) +3669 more potentially affected by CVE-2026-56822 via io.netty:netty-handler-ssl-ocsp (>=4.1.86.final, <=4.1.135.final)

io.netty:netty-handler-ssl-ocsp MAVEN version =4.1.86.final, =0.0.1, =1.2, =1.2, =1.2.3, =1.2.3, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =3.30.1.1, =3.10.0.5, =0.2.3.5, =3.12.0.1 -...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.catboost:catboost-spark_3.4_2.12 (>=1.2, <=1.2.10) +3669 more potentially affected by CVE-2026-56821 via io.netty:netty-handler-ssl-ocsp (>=4.1.86.final, <=4.1.135.final)

io.netty:netty-handler-ssl-ocsp MAVEN version =4.1.86.final, =0.0.1, =1.2, =1.2, =1.2.3, =1.2.3, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =3.30.1.1, =3.10.0.5, =0.2.3.5, =3.12.0.1 -...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +926 more potentially affected by CVE-2026-56821 via io.netty:netty-handler-ssl-ocsp (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-handler-ssl-ocsp MAVEN version =4.2.0.final, =4.2.15.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-handler-ssl-ocsp and may be impacted: - ai.catboost:catboost-spark4.02.13 1.2.10 - ai.catboost:catboost-spark4.12.1...

Array Networks SSL VPN - Login Panel Detection

Array Networks AG Series SSL VPN appliances provide enterprise remote access. The web login portal Pilot is typically accessible on port 8889 or via /prx/ paths. !/usr/bin/env python3 -- coding: utf-8 -- """Array Networks AG Series SSL VPN appliances provide enterprise remote access.""" from...

Ivanti Connect Secure Panel - Detect

Ivanti Connect Secure provides a seamless, cost-effective SSL VPN solution for remote and mobile users from any web-enabled device to corporate resources— anytime, anywhere. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Connect Secure provides a seamless, cost-effective SSL VPN solution for...

Cyberoam SSL VPN Panel - Detect

Cyberoam SSL VPN panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Cyberoam SSL VPN panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Cyberoam SSL VPN Panel - Detect', 'description':...

Sophos UTM User Portal - Login Panel Detection

Sophos UTM Unified Threat Management exposes a User Portal interface on ports 8443/5443 for SSL VPN client access and self-service. !/usr/bin/env python3 -- coding: utf-8 -- """Sophos UTM Unified Threat Management exposes a User Portal interface on ports 8443/5443 for SSL VPN client a.""" from...

SUSE-SU-2026:22959-1 Security update for python313, python3

This update for python313, python3 fixes the following issues: Changes in python313: Update to 3.13.14: - Security - gh-151159: Bumps the OpenSSL version to 3.0.21 on Android. - gh-150599: Fix a possible stack buffer overflow in bz2 when a bz2.BZ2Decompressor is reused after a decompression error...

Linux Distros Unpatched Vulnerability : CVE-2026-58227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In...