Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.40 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.40 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.35 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.35 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

CLSA-2026-1790666525 TuxCare security update for org.springframework.data:spring-data-commons (3 CVEs)

TuxCare rebuilt org.springframework.data:spring-data-commons to address 3 CVEs. Fixed in 3.2.11-tuxcare.1...

CVE-2026-35029-PoC

CVE-2026-35029 — LiteLLM /config/update уязвимость несанкционированного доступа Broken Access Control LiteLLM /config/update не проверяет права роли вызывающего. Любой аутентифицированный пользователь с действующим API-ключом без прав администратора может изменять конфигурацию прокси,...

CVE-2026-102264

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...

CVE-2026-102264

A cross-site scripting (XSS) vulnerability exists in the Edit Profile Feature of mwasikz robo-cafe-rms (affected up to commit 228c44a02823f04e85db32b7137809a2856148fc). The flaw is located within an unknown function in the frontend/update-account.php file, where manipulating the Name , Address , ...

CVE-2026-102264 mwasikz robo-cafe-rms Edit Profile Feature update-account.php cross site scripting

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...

EUVD-2026-88640

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...

meltdown-spectre-bios-list

Liste des mises à jour BIOS/Firmware Meltdown/Spectre Ceci est une liste de tous les produits et fabricants qui ont corrigé le BIOS/Firmware pour traiter les vulnérabilités Meltdown et Spectre Si vous avez de meilleures informations, veuillez envoyer des pull requests. Pourquoi j'ai fait cela ?...

zephyr-lwm2m-firmware-update-oob-read-cve-2026-10672-truncated-package-uri

CVE-2026-10672 — Preuve de concept de lecture hors limites de la mise à jour du firmware LwM2M de Zephyr Preuve de concept pour CVE-2026-10672 , une lecture hors limites dans le client de mise à jour du firmware LwM2M de Zephyr RTOS subsys/net/lib/lwm2m/lwm2mpullcontext.c. Vulnérabilité CVE :...

Oracle Linux 8 : perl-DBI (ELSA-2026-71608)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-71608 advisory. 1.641-3 - Force placeholder limit on :N and :pN placeholders CVE-2026-73194 Resolves: RHEL-247320 Tenable has extracted the preceding description block directl...

CVE-2026-102264: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...

libXfont2 security update

2.0.3-1.0.3 - Backport fix for CVE-2026-44950 Orabug: 39960840 - Backport fix for CVE-2026-59679 Orabug: 39960840 2.0.3-1.0.1 - Fix CVE-2026-56001, CVE-2026-56002, and CVE-2026-56003 Orabug: 39843361...

Linux Distros Unpatched Vulnerability : CVE-2026-53627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a low-privileged authenticated user can use the new API v2 to perform update...

Oracle Linux 7 : ELSA-2026-61234-0: / xmlrpc-c (ELSA-2026-612340)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-612340 advisory. 1.32.5-1905.0.1.svn2451 - Backport fix for CVE-2026-15928 Orabug: 39957695 Tenable has extracted the preceding description block directly from the Oracle Linu...

ROS-20260929-73-0164

The vulnerabilities in the sound/soc/stm/stm32sai.c and sound/soc/stm/stm32saisub.c modules, which support audio functions in Linux-based SoC cores, are related to errors during link counter updates. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity...

CVE-2026-86035: Improper Neutralization of Special Elements used in an OS Command

Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 2026.7.1 contains an argument-injection vulnerability in its Mercurial backend. Repository filenames beginning with - could be interpreted as Mercurial options instead of literal...

CVE-2024-4898-Poc

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 1-клик WP Staging & Migration = 0.1.0.38 - Отсутствие авторизации для неаутентифицированной настройки API/Обновление произвольных опций/Создание административного пользователя...

CVE-2024-5326-Poc

CVE-2024-5326 CVE-2024-5326 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX = 4.1.2 - Missing Authorization to Arbitrary Options Update Description Le plugin Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX pour WordPress est vulnérable à une modification non autorisée de...

CVE-2020-0688

Сканер CVE-2020-0688 Это небольшой грязный скрипт для проверки уязвимых Exchange-серверов по CVE-2020-0688 Он написан некрасиво и на PHP. Внимание: он проверяет только наличие установленного актуального обновления CU. Это не означает, что у вас установлен патч, исправляющий уязвимость! Требования...