23746 matches found
RHEL 9 : maven:3.9 (RHSA-2026:38500)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:38500 advisory. Maven is a software project management and comprehension tool. Based on the concept of a project object model POM, Maven can manage a project's buil...
PT-2026-59201
Impact So far, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the control of an attacker under very specific conditions. First of all, the attacker mus...
PT-2026-59941
Impact When tensorflow::full type::SubstituteFromAttrs receives a FullTypeDef& t that is not exactly three args, it triggers a CHECK-fail instead of returning a status. cpp Status SubstituteForEachAttrMap& attrs, FullTypeDef& t DCHECK EQt.args size, 3; const auto& cont = t.args0; const auto& tmpl...
Security update for libXfont2 (important)
openSUSE security update: security update for libxfont2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21284-1 Rating: important References: bsc1269018 bsc1269019 bsc1269020 Cross-References: CVE-2026-56001 CVE-2026-56002 CVE-2026-56003 CVSS scores...
Mako: A Self-Evolving Agentic Operating System (SE-AOS) for Autonomous Web Exploitation
We introduce the Self-Evolving Agentic Operating System SE-AOS: a new class of AI agent that treats exploit capability as a mutable, versioned kernel it extends at runtime, observing its own failures, synthesising new capabilities, proving them against a live target, and hot-loading them back int...
PT-2026-59801
Impact When tensorflow::full type::SubstituteFromAttrs receives a FullTypeDef& t that is not exactly three args, it triggers a CHECK-fail instead of returning a status. cpp Status SubstituteForEachAttrMap& attrs, FullTypeDef& t DCHECK EQt.args size, 3; const auto& cont = t.args0; const auto& tmpl...
CVE-2026-51538
EIPStackGroup OpENer version 2.3.0 (commit 76b95cf) is vulnerable to an Incorrect Access Control flaw in its handling of encapsulation sessions. The server fails to verify if a provided session_handle is associated with the specific TCP connection issuing the request, as there is no strong bindin...
Linux Distros Unpatched Vulnerability : CVE-2026-55213
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit edd7a120bfc4af11ac0cbebce2a43cc1f93f9af1, when h2o processes a QPACK...
SUSE SLED15 / SLES15 Security Update : libexif (SUSE-SU-2026:2837-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2837-1 advisory. This update for libexif fixes the following issues - CVE-2026-40385: Fixed information disclosure and crashes...
RockyLinux 9 : maven:3.9 (RLSA-2026:38500)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:38500 advisory. org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 Tenable has extracted the preceding description block...
libredwg-devel-0.14.8413-1.1 on GA media (moderate)
libredwg-devel-0.14.8413-1.1 on GA media Announcement ID: openSUSE-SU-2026:11247-1 Rating: moderate Cross-References: CVE-2026-15181 CVE-2026-15184 CVE-2026-9529 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all securit...
CVE-2026-15506
creationtimestamp| type| source ---|---|--- 2026-07-12 22:29:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqia2lm2hr26 2026-07-12 23:41:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqie4dn33n2w 2026-07-13 01:00:36+00:00| seen|...
CVE-2026-15506 SecureAge CatchPulse Driver saappctl.sys heap-based overflow
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been...
Exploit for Improper Control of Dynamically-Managed Code Resources in Vm2_Project Vm2
CVE-2023-29017 | vm2 Sandbox Escape를 통한 원격 코드 실행 WHS 4기 31...
trinity-lpe
trinity-lpe Kernel-mode privilege escalation via three-driver...
CVE-2026-56259
creationtimestamp| type| source ---|---|--- 2026-07-12 12:37:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6xnohbv2i 2026-07-12 12:58:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqha5ebg6o2e 2026-07-12 13:00:42+00:00| seen|...
CVE-2026-61875
creationtimestamp| type| source ---|---|--- 2026-07-12 12:31:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6nlrwqv2w 2026-07-12 13:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqhabhbgbv2r 2026-07-12 13:17:30+00:00| seen|...
WordPress گرویتی فرم فارسی plugin <= 3.0.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin گرویتی فرم فارسی versions = 3.0.2...
[SECURITY] Fedora 43 Update: tmux-3.7b-3.fc43
tmux is a "terminal multiplexer." It enables a number of terminals or windows to be accessed and controlled from a single terminal. tmux is intended to be a simple, modern, BSD-licensed alternative to programs such as GNU Screen...