CVE-2026-77681

CodeAstro Online Job Portal 1.0 is affected by an unrestricted file upload vulnerability in the file /users/update-profile.php. Manipulation of the Name argument allows a remote, authenticated attacker (low privileges) to upload arbitrary files, leading to low impact on confidentiality, integrity...

CLSA-2026-1787301097 TuxCare security update for io.netty (60 CVEs)

TuxCare rebuilt 47 io.netty packages to address 60 CVEs. Fixed in 4.1.119.Final-tuxcare.1...

WordPress Quiz And Survey Master plugin < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR vulnerability

Contributor+ Arbitrary Quiz Text Settings Update via IDOR vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Quiz And Survey Master versions 11.2.4...

CLSA-2026-1787292931 TuxCare security update for io.projectreactor.netty (2 CVEs)

TuxCare rebuilt 4 io.projectreactor.netty packages to address 2 CVEs. Fixed in 1.1.31-tuxcare.1...

curl security, bug fix, and enhancement update

An update is available for curl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The curl packages provide the libcurl library and the curl utility for downloadi...

Chromium: CVE-2026-76044 Race condition in USB

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Exploit for CVE-2026-0603

CVE-2026-0603 Hibernate ORM Injection / Second-Order SQL Injec...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby3.4: ruby3.4-3.4.10-31.6.hum1 aarch64, x8664 ruby3.4-bundled-gems-3.4.10-31.6.hum1 aarch64, x8664 ruby3.4-default-gems-3.4.10-31.6.hum1 noarch ruby3.4-devel-3.4.10-31.6.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby3.3: ruby3.3-3.3.10-23.5.hum1 aarch64, x8664 ruby3.3-bundled-gems-3.3.10-23.5.hum1 aarch64, x8664 ruby3.3-default-gems-3.3.10-23.5.hum1 noarch ruby3.3-devel-3.3.10-23.5.hum1 aarch64, x8664...

CVE-2026-74952

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Application Update component...

SUSE CVE-2026-74952

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 153.2, and Thunderbird 153.2...

CLSA-2026-1787271464 TuxCare security update for io.netty (59 CVEs)

TuxCare rebuilt 47 io.netty packages to address 59 CVEs. Fixed in 4.1.122.Final-tuxcare.2...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rabbitmq-server4.3: rabbitmq-server4.3-4.3.5-0.1.hum1 aarch64, x8664 rabbitmq-server4.3-4.3.5-0.1.hum1.src src Security Fixes: rabbitmq-server4.3: CVE-2026-59248 CVE-2026-65624...

PT-2026-79405

Name of the Vulnerable Software and Affected Versions TL-MR6400 version v7 Description A stack-based buffer overflow occurs in the firmware update functionality due to the unsafe processing of attacker-controlled metadata within a firmware image. An authenticated attacker can exploit this to...

Fedora 44 : dotnet8.0 (2026-1397d83d94)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1397d83d94 advisory. Update to .NET SDK 8.0.130 and Runtime 8.0.30 Fixes:...

Fedora 43 : dotnet8.0 (2026-0db5bf0aae)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0db5bf0aae advisory. Update to .NET SDK 8.0.130 and Runtime 8.0.30 Fixes:...

Photon OS 5.0: Go PHSA-2026-5.0-91-0960

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 44 : dotnet10.0 (2026-8b4cb2340a)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8b4cb2340a advisory. Update to .NET SDK 10.0.111 and Runtime 10.0.11 Fixes:...

Fedora 44 : dotnet9.0 (2026-7cfd54a4c1)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7cfd54a4c1 advisory. Update to .NET SDK 9.0.120 and Runtime 9.0.19 Fixes:...

php:8.2 security, bug fix, and enhancement update

libzip 1.7.3-1 - update to 1.7.3 php 8.2.33-1 - rebase to 8.2.33 php-pear 1:1.10.14-1 - update PEAR to 1.10.14 for PHP 8.2 RHEL-14705 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14705 php-pecl-rrd 2.0.3-1 - update to 2.0.3 php-pecl-xdebug3 3.2.2-2 - drop inetntoa usage using upstre...