Security update for grafana, system-user-grafana

This update for grafana, system-user-grafana fixes the following issues: Update to version 12.4.10: Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials bsc1275934 CVE-2026-2303: Drop dependency on vulnerable go.mongodb.org/mongo-driver...

SUSE-SU-2026:4600-1 Security update for grafana, system-user-grafana

This update for grafana, system-user-grafana fixes the following issues: - Update to version 12.4.10: Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials bsc1275934 CVE-2026-2303: Drop dependency on vulnerable go.mongodb.org/mongo-driver...

CVE-2026-61801

A flaw was found in the moby/sys/user package. The package does not properly limit memory allocation when parsing Unix-style user and group database files, such as /etc/passwd or /etc/group. An attacker who can supply a specially crafted file can cause excessive memory consumption, leading to a...

CVE-2026-101028

A flaw was found in the Ash framework. An authorized user can infer sensitive information from restricted related records by submitting queries that use aggregate functions, such as counting or checking for record existence. Because read authorization policies on related resources are not enforce...

CVE-2026-93548

The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user a request names, allowing any authenticated user to have the FooSales WordPress plugin before 1.43.3 act as an arbitrary other user, including an administrator, resulting in tha...

panos-captive-portal-rce

CVE-2026-0300 — PAN-OS User-ID Captive Portal Buffer Overflow RCE Scanner 🎯 Overview Buffer overflow in User-ID Authentication Portal Captive Portal service of PAN-OS. Unauthenticated attacker can execute code as root on affected Palo Alto Networks firewalls. Field| Value ---|--- CVE| CVE-2026-03...

CVE-2026-87109

An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to another member of the same organizatio...

CVE-2026-93548

The FooSales WordPress plugin, in versions prior to 1.43.3 , is vulnerable to a Subscriber+ privilege escalation vulnerability. The flaw exists because the plugin fails to verify if an authenticated caller is authorized to act as the user specified in a request. This allows any authenticated user...

CVE-2026-93548 FooSales < 1.43.3 - Subscriber+ Privilege Escalation via User Impersonation

The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user a request names, allowing any authenticated user to have the FooSales WordPress plugin before 1.43.3 act as an arbitrary other user, including an administrator, resulting in tha...

EUVD-2026-95492

An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to another member of the same organizatio...

CVE-2026-87109

An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed via user-listing endpoints. This vulnerability occurs specifically while a member's enrollment remains unconfirmed, leading to the disclosure of secret authentication material to o...

Ops Manager Sensitive MFA Enrollment Information Exposure in User Listings

An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to another member of the same organizatio...

dnsprobe

Nota - Este proyecto está discontinuado. Las nuevas actualizaciones y correcciones se enviarán a dnsx. DNSProbe es una herramienta construida sobre retryabledns que permite realizar múltiples consultas DNS de su elección con una lista de resolutores proporcionados por el usuario. Recursos Recurso...

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM genera flujos de datos de señal de banda base GPS, que pueden convertirse a RF utilizando plataformas de radio definida por software SDR, como ADALM-Pluto, bladeRF, HackRF, y USRP. Instrucciones de compilación en Windows 1. Inicie Visual Studio. 2. Cree un proyecto vacío...

CVE-2026-96518: Missing Authorization

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...

CVE-2026-96337: Missing Authorization

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...

CVE-2026-107822: Use of Incorrectly-Resolved Name or Reference

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched because both used an empty IP component. ...

Linux Distros Unpatched Vulnerability : CVE-2026-56866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the reque...

RockyLinux 10 : sssd (RLSA-2026:77534)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:77534 advisory. sssd: sssd: IdP authentication prefix comparison allows cross-user impersonation CVE-2026-87853 Tenable has extracted the preceding description block directly...

Linux Distros Unpatched Vulnerability : CVE-2026-61801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix- style user and group database files. Versions before 0.4....