5342 matches found
CLSA-2026-1768435720 TuxCare security update for 13 packages (1 CVE)
TuxCare rebuilt 13 packages to address 1 CVE. Fixed in 4.3.11.Final-tuxcare.2...
CLSA-2025-1762906008 TuxCare security update for org.springframework (13 CVEs)
TuxCare rebuilt 23 org.springframework packages to address 13 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.1...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.1-0.5.1.hum1 aarch64, x8664 grafana13.1-13.1.1-0.5.1.hum1.src src Security Fixes: grafana13.1: CVE-2026-69152 CVE-2026-69153...
ROOT-OS-DEBIAN-13-CVE-2026-27456 CVE-2026-27456 in util-linux - Patched by Root
Root has patched CVE-2026-27456 in the util-linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-14104 CVE-2025-14104 in util-linux - Patched by Root
Root has patched CVE-2025-14104 in the util-linux package for Root:Debian:13. Multiple fixed versions available...
Important: python3.13
Issue Overview: The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data. CVE-2026-15308 In the Tarfile.extract function, the filter parameter is not passed properly when extracting...
Specter 2.3 NFC Reader / Skimmer Bug-Sweep
Specter turns your Flipper Zero into a pocket counter-surveillance bug-sweep for active 13.56 MHz NFC readers - a hidden card skimmer slipped into a payment terminal, a covert reader behind a door panel, a rogue logger taped under a desk. It passively senses the RF carrier that any powered-on...
Echoes in the Digital Abyss: Examining the Bubble Surrounding Security and Privacy Discourse in Social Networks
The dissemination of security and privacy education and guidance has been and still remains a challenge today. Social networks represent a potential avenue for sharing best practices, and experimentally they have been found to be effective at this task. While this appears promising, in the real...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.1-0.5.hum1 aarch64, x8664 grafana13.1-13.1.1-0.5.hum1.src src Security Fixes: grafana13.1: CVE-2026-67313 CVE-2026-67314 CVE-2026-67315 CVE-2026-67316 CVE-2026-67317...
UBUNTU-CVE-2026-59643
In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...
EUVD-2026-52031
In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.1-0.4.hum1 aarch64, x8664 grafana13.1-13.1.1-0.4.hum1.src src Security Fixes: grafana13.1: CVE-2026-18446...
CVE-2026-15601 Kirki <= 6.0.13 - Authenticated (Editor+) Path Traversal to Arbitrary File Write (Zip Slip)
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Path Traversal Zip Slip in all versions up to, and including, 6.0.13 via the extractzipfile function. This makes it possible for authenticated attackers, with custom-level access and above, to...
CVE-2026-32597 affecting package python-jwt for versions less than 2.13.0-1
CVE-2026-32597 affecting package python-jwt for versions less than 2.13.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-65841
Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.13.6, Jodit's clean-html denyTags filter does not normalize foreign SVG or MathML script node names, allowing a script element nested directly in SVG or MathML to remain in editor.value and execute when conte...
WordPress Kirki – Freeform Page Builder, Website Builder & Customizer plugin <= 6.0.13 - Authenticated (Editor+) Path Traversal to Arbitrary File Write (Zip Slip) vulnerability
Authenticated Editor+ Path Traversal to Arbitrary File Write Zip Slip vulnerability discovered by cuokon, Wordfence PRISM in WordPress Plugin Kirki versions = 6.0.13...
CVE-2026-65841 Jodit has cross-site scripting (XSS) via <script> nested in SVG that bypasses clean-html sanitization
Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.13.6, Jodit's clean-html denyTags filter does not normalize foreign SVG or MathML script node names, allowing a script element nested directly in SVG or MathML to remain in editor.value and execute when conte...
CVE-2026-52856
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0...
CVE-2026-12721
The Kirki WordPress plugin before 6.0.13 does not properly sanitise and escape a value taken from the request before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...