886 matches found
Twenty-Three-Scanner
🛰️ Twenty-Three Scanner A Powerful , Fast , and Elegant scanner for detecting vulnerable Telnetd services affected by CVE-2026-24061. Built with pure Python standard library - zero external dependencies required. -A32D2A?style=for-the-badge 🔗 Table of Contents ⚖️ License 🧩 Features ☣️ Vulnerability...
ROOT-OS-UBUNTU-2204-CVE-2023-54107 CVE-2023-54107 in linux - Patched by Root
Root has patched CVE-2023-54107 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
Astra Linux – Vulnerability in Twisted
Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web would process the requests asynchronously, without guaranteeing the order of responses. If either of the endpoints was controlled by an...
ROOT-OS-ALPINE-323-CVE-2026-3441 CVE-2026-3441 in binutils - Patched by Root
Root has patched CVE-2026-3441 in the binutils package for Root:Alpine:3.23. Multiple fixed versions available...
ROOT-OS-ALPINE-323-CVE-2026-11586 CVE-2026-11586 in curl - Patched by Root
Root has patched CVE-2026-11586 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...
ROOT-OS-ALPINE-323-CVE-2026-8926 CVE-2026-8926 in curl - Patched by Root
Root has patched CVE-2026-8926 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...
CVE-2026-66000
Frappe is a full-stack web application framework. Prior to 16.23.0 and 15.112.0, Document Follow notification generation does not re-evaluate the recipient's current document permissions, allowing users whose access was revoked or reduced to continue receiving document data by email. This issue i...
CVE-2026-66059 Frappe: Field-level permission bypass via Document Follow
Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.112.0, a field-level permissions bypass exposes restricted DocType fields. This issue is fixed in versions 16.23.0 and 15.112.0...
CVE-2026-66059
CVE-2026-66059 concerns the Frappe full‑stack web framework where, prior to versions 16.20.0 and 15.112.0 , a field‑level permissions bypass could expose restricted DocType fields. The underlying issue is a bypass of field permissions, enabling access to normally restricted data. The vulnerabilit...
[SECURITY] Fedora 43 Update: samba-4.23.10-1.fc43
Samba is the standard Windows interoperability suite of programs for Linux and Unix...
Relative/Absolute Path Traversal (CWE-23/CWE-36) in `decompress_impl` that enables an arbitrary file write.
Summary All versions of sevenz-rust fail to validate file paths when extracting in decompressimpl the underlying function used in the exposed decompress api functions. This oversight allows a maliciously crafted archive to extract outside the extraction directory, from both relative paths such as...
CLSA-2026-1783645402 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 23 org.springframework packages to address 1 CVE. Fixed in 5.2.13.RELEASE-tuxcare.6...
CLSA-2026-1777423182 TuxCare security update for 21 packages (1 CVE)
TuxCare rebuilt 21 packages to address 1 CVE. Fixed in 0.15.18-tuxcare.1...
CLSA-2026-1777336770 TuxCare security update for 7 packages (1 CVE)
TuxCare rebuilt 7 packages to address 1 CVE. Fixed in 0.18.20-tuxcare.1...
CLSA-2026-1774657371 TuxCare security update for jsonpath-plus (2 CVEs)
TuxCare rebuilt jsonpath-plus to address 2 CVEs. Fixed in 7.2.0-tuxcare.1...
CLSA-2026-1770250143 TuxCare security update for 123 packages (1 CVE)
TuxCare rebuilt 123 packages to address 1 CVE. Fixed in 11.0.27.tuxcare00001...
CLSA-2026-1770250144 TuxCare security update for 123 packages (1 CVE)
TuxCare rebuilt 123 packages to address 1 CVE. Fixed in 10.0.27.tuxcare00001...
CLSA-2025-1765238872 TuxCare security update for org.apache.avro (1 CVE)
TuxCare rebuilt 23 org.apache.avro packages to address 1 CVE. Fixed in 1.10.2-tuxcare.1...