SUSE-SU-2026:0233-1 Security update for python-virtualenv

This update for python-virtualenv fixes the following issues: - CVE-2026-22702: Fixed local attacker can redirect file operations via TOCTOU race condition bsc1256458...

SUSE-SU-2026:0220-1 Security update for python-filelock

This update for python-filelock fixes the following issues: - CVE-2025-68146: TOCTOU race condition may allow local attackers to corrupt or truncate arbitrary user files bsc1255244. - CVE-2026-22701: TOCTOU race condition in the SoftFileLock implementation bsc1256457...

CVE-2025-71176

creationtimestamp| type| source ---|---|--- 2026-01-22 07:20:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcynktrahf2n 2026-05-28 19:29:34+00:00| seen| https://gist.github.com/lesnargitonga/ded68f9d3d270cc386fe7c2227970ebc...

CVE-2026-24038

Horilla is a free and open source Human Resource Management System HRMS. In version 1.4.0, the OTP handling logic has a flawed equality check that can be bypassed. When an OTP expires, the server returns None, and if an attacker omits the otp field from their POST request, the user-supplied OTP i...

EUVD-2026-4219

Horilla is a free and open source Human Resource Management System HRMS. In version 1.4.0, the OTP handling logic has a flawed equality check that can be bypassed. When an OTP expires, the server returns None, and if an attacker omits the otp field from their POST request, the user-supplied OTP i...

CVE-2026-24038

Horilla is a free and open source Human Resource Management System HRMS. In version 1.4.0, the OTP handling logic has a flawed equality check that can be bypassed. When an OTP expires, the server returns None, and if an attacker omits the otp field from their POST request, the user-supplied OTP i...

CVE-2026-24038 Horilla HR has 2FA Bypass through its OTP Handling Logic

Horilla is a free and open source Human Resource Management System HRMS. In version 1.4.0, the OTP handling logic has a flawed equality check that can be bypassed. When an OTP expires, the server returns None, and if an attacker omits the otp field from their POST request, the user-supplied OTP i...

CVE-2026-24038

Horilla HRMS has a 2FA bypass in version 1.4.0 due to a flawed OTP equality check: when OTP expires, the server returns None and omitting the otp field makes user_otp == otp pass, bypassing 2FA. Administrative accounts risk data compromise; fixed in version 1.5.0. Remediation: upgrade to 1.5.0 or...

GHSA-5WVM-4M4Q-RH7J

creationtimestamp| type| source ---|---|--- 2026-01-22 03:17:23+00:00| seen| Telegram/tTY91DEWO-ryf2bgI1Zbqu1pP6WWF8wdw0as9TjL7seY8JU...

CVE-2026-24047

creationtimestamp| type| source ---|---|--- 2026-01-22 01:58:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcy3kmkoxq23 2026-01-24 21:22:59+00:00| seen| https://gist.github.com/alon710/4b217fe2cf8ffb61c81cdbc3ae7afb81 2026-01-24 22:19:21+00:00| seen|...

CVE-2026-23990

creationtimestamp| type| source ---|---|--- 2026-01-22 01:05:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxyls5sgi23 2026-01-24 21:22:57+00:00| seen| https://gist.github.com/alon710/a8f00d02af9bbef05b5cf8f64b7e8a02 2026-01-24 22:19:08+00:00| seen|...

CVE-2025-70644

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub60CFC function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

PT-2026-3914

Name of the Vulnerable Software and Affected Versions Horilla version 1.4.0 Description Horilla, a Human Resource Management System HRMS, contains a flaw in its two-factor authentication implementation. Specifically, the OTP handling logic has a flawed equality check. When an OTP expires, the...

SUSE SLES15 Security Update : kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2026:0204-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0204-1 advisory. This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.73 fixes various security issues The following security issues were fixed: -...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_65-default / etc (SUSE-SU-2026:0202-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0202-1 advisory. This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.65 fixes various security issues The following security issues were fixed: -...

CONTEX-T: Contextual Privacy Exploitation Via Transformer Spectral Analysis for IoT Device Fingerprinting

The rapid expansion of internet of things IoT devices have created a pervasive ecosystem where encrypted wireless communications serve as the primary privacy and security protection mechanism. While encryption effectively protects message content, packet metadata and statistics inadvertently expo...

ROS-20260122-73-0020

A vulnerability in the WebRTC technology of Google Chrome browser is related to access control errors. Exploitation of the vulnerability allows an attacker acting remotely to gain read/write access to arbitrary files...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37886)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37886 advisory. - In the Linux kernel, the following vulnerability has been resolved: pdscore: make waitcontext part of qinfo...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22009)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22009 advisory. - In the Linux kernel, the following vulnerability has been resolved: regulator: dummy: force synchronous...

SUSE SLES15 Security Update : kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:0173-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0173-1 advisory. This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.88 fixes various security issues The following security issues were fixed: -...