251 matches found
PT-2026-30314
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wte trip tax' shortcode in all versions up to, and including, 6.7.5 due to insufficient input sanitization and output escaping on user supplied...
Fedora 43 : bind9-next (2026-a6efefa854)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a6efefa854 advisory. Update to 9.21.20 rhbz2440560 Security Fixes: - Fix unbounded NSEC3 iterations when validating referrals to unsigned delegations. CVE-2026-1519 - Fi...
CVE-2026-34535
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a segmentation fault SEGV in CIccTagArray::Cleanup. The issue is observable under UBSan/ASan as misaligned member access / misaligned pointer...
MiracleLinux 8 : ruby:2.5 (AXSA:2021-2345:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2345:01 advisory. ruby: NUL injection vulnerability of File.fnmatch and File.fnmatch? CVE-2019-15845 ruby: Regular expression denial of service vulnerability of...
MiracleLinux 7 : rh-ruby27-ruby-2.7.3-129.el7 (AXSA:2021-1769:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1769:01 advisory. ruby: Potential HTTP request smuggling in WEBrick CVE-2020-25613 ruby: XML round-trip vulnerability in REXML CVE-2021-28965 Tenable has extracted th...
MiracleLinux 8 : ruby:2.7 (AXSA:2021-2391:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2391:01 advisory. ruby: Potential HTTP request smuggling in WEBrick CVE-2020-25613 ruby: XML round-trip vulnerability in REXML CVE-2021-28965 Tenable has extracted th...
MiracleLinux 7 : rh-ruby25-ruby-2.5.9-9.el7 (AXSA:2021-1762:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1762:01 advisory. ruby: NUL injection vulnerability of File.fnmatch and File.fnmatch? CVE-2019-15845 ruby: Regular expression denial of service vulnerability of...
CVE-2024-41345
openflights commit 5234b5b is vulnerable to Cross-Site Scripting XSS via php/trip.php...
Faking Receipts with AI
Over the past few decades, it's become easier and easier to create fake receipts. Decades ago, it required special paper and printers--I remember a company in the UK advertising its services to people trying to cover up their affairs. Then, receipts became computerized, and faking them required...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988957)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988957 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZGETTRIP NULL pointer dereference Do not call gettriphyst from...
EUVD-2015-0411
Malware in sbrugna...
EUVD-2017-17965
Malware in sbrugna...
EUVD-2017-17966
Malware in sbrugna...
EUVD-2014-0408
Malware in sbrugna...
EUVD-2020-27451
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987145)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987145 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZGETTRIP NULL pointer dereference Do not call gettriphyst from...
EUVD-2023-32521
Malicious code in bioql PyPI...
EUVD-2024-44898
Malicious code in bioql PyPI...
