[SECURITY] Fedora 44 Update: knot-3.5.8-1.fc44

Knot DNS is a high-performance authoritative DNS server implementation...

[SECURITY] Fedora 44 Update: environment-modules-5.6.2-1.fc44

The Environment Modules package provides for the dynamic modification of a user's environment via modulefiles. Each modulefile contains the information needed to configure the shell for an application. Once the Modules package is initialized, the environment can be modified on a per-module basis...

[SECURITY] Fedora 44 Update: python-configargparse-1.7.7-1.fc44

A drop-in replacement for argparse that allows options to also be set via config files and/or environment variables. Applications with more than a handful of user-settable options are best configured through a combination of command line args, config files, hard-cod ed defaults, and in some cases...

EUVD-2026-80010

A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard...

[SECURITY] Fedora 45 Update: ruby-4.0.6-38.fc45

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

[SECURITY] Fedora 45 Update: rubygems-4.0.20-1.fc45

RubyGems is the Ruby standard for publishing and managing third party libraries...

[SECURITY] Fedora 45 Update: environment-modules-5.6.2-1.fc45

The Environment Modules package provides for the dynamic modification of a user's environment via modulefiles. Each modulefile contains the information needed to configure the shell for an application. Once the Modules package is initialized, the environment can be modified on a per-module basis...

[SECURITY] Fedora 45 Update: perl-Authen-SASL-2.2100-1.fc45

SASL is a generic mechanism for authentication used by several network protocols. Authen::SASL provides an implementation framework that all protocols should be able to share...

[SECURITY] Fedora 45 Update: sblim-sfcb-1.4.9-44.fc45

Small Footprint CIM Broker sfcb is a CIM server conforming to the CIM Operations over HTTP protocol. It is robust, with low resource consumption and therefore specifically suited for embedded and resource constrained environments. sfcb supports providers written against the Common Manageability...

[SECURITY] Fedora 45 Update: knot-3.5.8-1.fc45

Knot DNS is a high-performance authoritative DNS server implementation...

[SECURITY] Fedora 45 Update: python-configargparse-1.7.7-1.fc45

A drop-in replacement for argparse that allows options to also be set via config files and/or environment variables. Applications with more than a handful of user-settable options are best configured through a combination of command line args, config files, hard-cod ed defaults, and in some cases...

[SECURITY] Fedora 45 Update: GitPython-3.1.62-1.fc45

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. It provides abstractions of git objects for easy access of repository data, a nd additionally allows you to access the git repository more directly using eith er a...

PT-2026-93263

Name of the Vulnerable Software and Affected Versions VeloCloud Edge affected versions not specified Description The software update workflow fails to properly validate signatures of update bundles because it does not restrict the digest algorithm used for artifact verification. A digest algorith...

PT-2026-93763

Adenion Blog2Social plugin for WordPress before 9.1.0 allows low-privileged users to modify the scheduled post records of other users. The b2s calendar move post AJAX handler in includes/Ajax/Post.php issues an UPDATE against the b2s posts table using only the attacker-supplied b2s id primary key...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38591)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. There is an access control vulnerability in TOTOLINK T6. This vulnerability stems from improper access control in the meshSlaveUpgfw function. Attackers can exploit this vulnerability by sending a specially crafted MQTT message...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38587)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the informSyncUpgfw function. Attackers can exploit this vulnerability by sending specially crafted MQTT...

PT-2026-93843

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

PT-2026-93851

Name of the Vulnerable Software and Affected Versions Dell Update Package Framework versions prior to 26.07.03 Description A Stack-based Buffer Overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

PT-2026-93826

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/update category.php of the component Category Update. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit...

CVE-2026-92567: Authorization Bypass Through User-Controlled Key

TDuck survey form through version 5.0 contains an authorization bypass vulnerability in the POST /user/form/data/update endpoint that allows authenticated users to overwrite other users' form submission data. Attackers can discover submission identifiers allocated in narrow ranges and modify...