ditto

Ditto est un petit outil qui prend un nom de domaine en entrée et génère toutes ses variantes pour une attaque par homographie en sortie, en vérifiant lesquelles sont disponibles et lesquelles sont déjà enregistrées. Domaines de preuve de concept PoC https://tᴡitter.com/ https://clᴏudflare.com...

MyLog4Shell

MyLog4Shell log4j RCE 악용 탐지 이 명령어와 규칙을 사용하여 log4j RCE 취약점CVE-2021-44228에 대한 악용 시도를 검색할 수 있습니다. Grep / Zgrep 이 명령어는 /var/log 및 /usr/var/log 폴더와 모든 하위 폴더에 있는 압축되지 않은 파일에서 악용 시도를 검색합니다. sudo egrep -I -i -r '$|%7Bjndi:ldaps?|rmi|dns|nis|iiop|corba|nds|http:/^\n+' /var/log 이 명령어는 /var/log 폴더와 모든 하위...

xencrypt

Xencrypt PowerShell crypter v 1.0 Authors Xentropy @SamuelAnttila SecForce @SECFORCELTD If you want to read about the design behind this tool and how to make your own crypter, there's an article I wrote about it here: Write a crypter in any language Note Don't be a script kiddie, I made this GPLv...

urlcrazy

😜⌨ URLCrazy URLCrazy est un outil OSINT permettant de générer et de tester des typos ou variations de noms de domaine afin de détecter ou d’effectuer du typosquatting, du détournement d’URL, du phishing et de l’espionnage d’entreprise. Page d’accueil : https://github.com/urbanadventurer/urlcrazy ...

CVE-2026-64633

CVE-2026-64633 분석 페이로드 파일 payloads/ — 생성된 페이로드 문서 처치 + 대조 변형 payloads/manifest.json — pids / 쌍이 포함된 페이로드 매니페스트...

CVE-2026-71518

CVE-2026-71518 — Обход авторизации без аутентификации в Typemill Эквивалентные по пути варианты URL обходят ролевое ограничение загрузки медиафайлов Ограничение проверяется по необработанному пути запроса; файл читается по пути, разрешённому ОС, — эти два пути расходятся Краткий обзор · Сводка ·...

CVE-2026-6084 Stored Cross-Site Scripting in StockAgile by Novadigits technologies

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/variants' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’, ‘name...

PT-2026-98412

Name of the Vulnerable Software and Affected Versions StockAgile affected versions not specified Description Stored Cross-Site Scripting XSS occurs in the API and management panel. The issue exists on the server side within the REST endpoint '/inventory/configuration/variants', where malicious...

CVE-2026-6084: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/variants' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’, ‘name...

CLEANSTART-2026-CT17249 Security fix for CVE-2025-68121 applied in: apache-nifi 2.10.0-r4, argo-cd-fips 3.0.22-r1, argo-cd-fips 3.1.11-r0, argo-cd-fips 3.1.12-r1, argo-workflows 3.6.17-r0, argo-workflows 3.7.7-r0, argo-workflows 3.7.8-r0, argo-workflows-fips 3.6.16-r0, argo-workflows-fips 3.6.17-r0, aws-ebs-csi-driver 1.54.0-r0, aws-efs-csi-driver 2.2.0-r0, aws-eks-pod-identity-agent 0.1.36-r0, aws-eks-pod-identity-agent-fips 0.1.36-r0, aws-flb-cloudwatch 1.9.4-r0, aws-flb-firehose 1.7.2-r0, aws-flb-kinesis 1.10.3-r0, calico-fips 3.31.2-r2, cass-operator 1.28.1-r0, cert-manager-fips 1.17.4-r1, certificate-transparency-trillian-ctserver 1.3.2-r1, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, cloudnative-pg-fips 1.24.4-r1, cloudnative-pg-fips 1.25.4-r1, cni-plugin-flannel 1.6.0-r0, configmap-reload 0.15.0-r0, coredns 1.14.1-r0, cosign 2.4.3-r0, cosign 2.5.3-r0, crossplane 2.0.2-r0, dcgm-exporter 4.5.1-r0, descheduler 0.34.0-r1, distribution 3.0.0-r1, druid-exporter-fips 0.10-r2, druid-exporter-fips 0.11-r3, druid-exporter-fips 0.8-r1, druid-exporter-fips 0.9-r1, dynamic-localpv-provisioner 4.4.0-r2, eks-distro-kube-apiserver-fips 1.34.2-r0, eks-distro-kube-scheduler-fips 1.34.3-r0, envoy-ratelimit 0.0.0_git20251231-r0, external-dns 0.18.0-r0, external-secrets 0.20.4-r0, external-secrets-fips 0.17.0-r2, external-secrets-fips 0.20.4-r2, external-secrets-fips 1.2.0-r0, fluent-operator-fips 3.2.0-r6, flux-image-automation-controller-fips 4.0.1-r0, flux-notification-controller-fips 1.5.0-r0, git-lfs 3.7.0-r1, git-lfs-fips 3.7.0-r2, git-sync 4.5.1-r1, gitlab-kas 18.5.1-r0, gitlab-pages 18.7.1-r0, gitlab-pages-fips 18.7.1-r0, go-discover 0_git20250325-r0, go-fips-1.25 1.25.6-r1, go1.26 1.25.5-r1, grafana-mimir 3.0.2-r0, grafana-mimir-fips 3.0.2-r0, haproxy-ingress 0.15.1-r0, harbor 2.12.4-r0, harbor 2.13.5-r0, harbor 2.14.3-r0, harbor 2.15.0-r0, harbor-fips 2.13.5-r0, harbor-fips 2.14.3-r0, harbor-fips 2.15.0-r0, harbor-registry 3.0.0.1-r3, harbor-registry-fips 3.0.0.1-r4, helm 3.19.5-r0, helm 4.0.1-r0, helm-fips 3.19.5-r0, helm-fips 4.0.5-r0, helm-operator-fips 1.41.1-r2, ip-masq-agent 2.12.6-r1, istio-fips 1.26.8-r0, istio-fips 1.28.3-r0, istio-pilot-discovery-fips 1.28.3-r0, jitsucom-bulker 2.11.913-r1, k8ssandra-client-fips 0.5.0-r6, k8ssandra-client-fips 0.8.7-r0, k8ssandra-operator 1.26.0-r0, k8ssandra-operator-fips 1.29.0-r1, kafka_exporter-fips 1.6.0-r0, kafka_exporter-fips 1.7.0-r1, kapp-controller-fips 0.59.0-r2, kserve 0.16.0-r0, kserve-rest-proxy 0.12.0-r1, kube-bench-fips 0.14.1-r0, kube-state-metrics 2.16.0-r3, kubernetes-csi-driver-nfs-fips 4.12.1-r1, kubernetes-csi-driver-nfs-fips 4.13.0-r0, kubernetes-csi-external-attacher 4.10.0-r0, kubernetes-csi-external-attacher-fips 4.10.0-r0, kubernetes-csi-external-provisioner-fips 6.1.0-r0, kubernetes-csi-external-resizer 2.0.0-r0, kubernetes-csi-external-resizer-fips 2.0.0-r0, kubernetes-csi-external-snapshotter-fips 8.4.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, kubernetes-dashboard-api 1.14.0-r1, kubernetes-dashboard-api-fips 1.14.0-r1, kubernetes-dashboard-auth 1.4.0-r1, kubernetes-dashboard-auth-fips 1.4.0-r1, kubernetes-dashboard-metrics-scraper 1.2.2-r0, kubernetes-dashboard-metrics-scraper-fips 1.2.2-r0, kubernetes-dashboard-web 1.7.0-r0, kubernetes-replicator-fips 2.12.2-r0, kubescape 3.0.47-r0, kured 1.20.0-r0, kustomize 5.7.1-r1, kustomize-fips 5.7.1-r1, kyverno-fips 1.13.6-r9, kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r9, linkerd2 25.12.3-r0, local-static-provisioner 2.8.0-r1, logstash-exporter 1.9.1-r2, logstash-exporter-fips 1.8.4-r1, logstash-fips 9.2.4-r2, metallb-fips 0.15.3-r0, minio-operator 7.1.1-r3, minio-operator-fips 5.0.18-r6, minio-operator-fips 6.0.4-r8, minio-operator-fips 7.0.1-r8, minio-operator-fips 7.1.1-r8, newrelic-fluent-bit-output 2.4.0-r0, newrelic-infrastructure-agent 1.71.4-r0, newrelic-nri-kube-events 2.16.4-r0, newrelic-prometheus-configurator 2.4.4-r0, nginx-prometheus-exporter 1.5.1-r1, nginx-prometheus-exporter-fips 1.5.1-r1, node-feature-discovery 0.18.3-r2, node-problem-detector 0.8.19-r1, nri-kubernetes 3.51.2-r0, openbao 2.4.3-r1, openbao-fips 2.3.2-r4, openbao-fips 2.5.0-r0, opensearch-k8s-operator-fips 2.5.1-r1, opensearch-k8s-operator-fips 2.6.1-r2, opensearch-k8s-operator-fips 2.6.1-r7, opensearch-k8s-operator-fips 2.7.0-r8, opentofu-fips 1.7.10-r1, opentofu-fips 1.8.11-r1, percona-xtradb-cluster-operator 1.18.0-r1, percona-xtradb-cluster-operator 1.19.0-r1, percona-xtradb-cluster-operator-fips 1.18.0-r1, percona-xtradb-cluster-operator-fips 1.19.0-r1, prometheus-elasticsearch-exporter 1.10.0-r0, prometheus-elasticsearch-exporter-fips 1.10.0-r0, prometheus-mysqld-exporter 0.18.0-r0, prometheus-mysqld-exporter-fips 0.18.0-r0, prometheus-node-exporter 1.8.0-r3, prometheus-operator 0.87.1-r0, prometheus-operator-fips 0.88.0-r0, prometheus-operator-fips 0.88.0-r1, prometheus-redis-exporter-fips 1.77.0-r2, prometheus-redis-exporter-fips 1.78.0-r2, prometheus-redis-exporter-fips 1.79.0-r2, prometheus-redis-exporter-fips 1.80.0-r0, prometheus-redis-exporter-fips 1.80.1-r1, prometheus-statsd-exporter 0.28.0-r0, promxy 0.0.93-r1, pulumi-kubernetes-operator 1.16.0-r0, rabbitmq-cluster-operator 2.18.0-r0, rabbitmq-messaging-topology-operator 1.16.0-r0, rancher-agent 2.13.1-r0, rclone 1.72.1-r1, runc 1.1.14-r0, sealed-secrets 0.33.1-r0, sealed-secrets 0.34.0-r0, sigstore-scaffolding 0.7.29-r2, sigstore-scaffolding 0.7.31-r2, smarter-device-manager-fips 1.20.12-r0, spark-operator 2.1.1-r3, spark-operator 2.2.1-r0, spark-operator 2.3.0-r0, spark-operator 2.4.0-r0, spire-server 1.14.1-r2, spire-server-fips 1.14.1-r2, stakater-reloader-fips 1.2.1-r3, step-ca-fips 0.29.0-r0, step-issuer 0.9.11-r1, syft 1.39.0-r0, tekton-chains 0.26.0-r3, tekton-chains-fips 0.26.0-r3, tekton-pipelines 1.5.0-r3, tekton-pipelines-fips 1.5.0-r1, temporal 1.5.1-r0, temporal-ui-server-fips 2.44.0-r0, terragrunt-fips 0.94.0-r0, terragrunt-fips 0.95.1-r0, timoni 0.25.2-r0, trillian 1.7.2-r0, trino 479-r0, trust-manager-fips 0.20.3-r0, trust-manager-fips 0.21.1-r0, vault 1.21.2-r0, velero 1.17.2-r0, velero-fips 1.17.1-r1, velero-fips 1.17.2-r1, velero-plugin-for-aws 1.10.1-r1, velero-plugin-for-aws 1.12.2-r2, vertical-pod-autoscaler 1.5.1-r2, vertical-pod-autoscaler-fips 1.5.1-r1, victoriametrics-cluster 1.132.0-r1, victoriametrics-cluster-fips 1.132.0-r0, victoriametrics-operator 0.65.0-r1, victoriametrics-operator-fips 0.65.0-r1, wave-fips 0.10.0-r1, wave-fips 0.9.0-r3, weaviate 1.35.2-r0, whereabouts 0.9.2-r0, yunikorn-k8shim 1.7.0-r0, yunikorn-web 1.7.0-r0, yunikorn-web-fips 1.7.0-r0, zot 2.1.13-r0

CVE-2025-68121 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WY32134 Security fix for CVE-2026-32280 applied in: apache-nifi 2.10.0-r4, argo-cd 3.0.23-r2, argo-cd-fips 3.0.23-r1, argo-workflows-fips 4.0.4-r0, aws-eks-pod-identity-agent 0.1.36-r0, aws-eks-pod-identity-agent-fips 0.1.36-r0, aws-flb-cloudwatch 1.9.4-r0, aws-flb-firehose 1.7.2-r0, aws-flb-kinesis 1.10.3-r0, aws-load-balancer-controller 3.2.1-r0, aws-privateca-issuer 1.7.0-r0, aws-privateca-issuer-fips 1.7.0-r1, cadvisor 0.56.2-r0, cadvisor-fips 0.55.1-r0, calico 3.30.7-r1, cass-operator 1.28.1-r2, cass-operator-fips 1.30.0-r1, cert-manager 1.20.0-r0, cert-manager 1.20.1-r0, cert-manager-cmctl-fips 2.4.0-r3, cert-manager-fips 1.17.4-r1, cert-manager-webhook-pdns-fips 3.2.3-r2, certificate-transparency-trillian-ctserver 1.3.2-r2, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, cilium 1.17.15-r0, cilium 1.18.9-r0, cilium 1.19.3-r0, cloudnative-pg-fips 1.24.4-r4, cloudnative-pg-fips 1.25.4-r3, cloudnative-pg-fips 1.26.3-r2, cloudnative-pg-fips 1.27.3-r2, cloudnative-pg-fips 1.28.1-r2, cni-plugin-flannel 1.6.0-r0, configmap-reload 0.15.0-r0, confluent-cp-docker-utils 1.0.8-r0, crossplane-provider-sql-fips 0.13.0-r1, dex 2.45.1-r2, docker 29.3.0-r1, docker-compose 5.1.0-r0, druid-exporter-fips 0.10-r4, druid-exporter-fips 0.11-r5, druid-exporter-fips 0.8-r3, druid-exporter-fips 0.9-r3, eks-distro-kube-apiserver 1.34.2-r0, eks-distro-kube-apiserver-fips 1.34.2-r0, eks-distro-kube-controller-manager-fips 1.34.2-r0, eks-distro-kube-scheduler-fips 1.34.3-r0, external-secrets 2.2.0-r0, external-secrets-fips 0.17.0-r2, external-secrets-fips 2.2.0-r0, fluent-operator-fips 3.2.0-r7, fluent-operator-fips 3.3.0-r8, fluent-operator-fips 3.4.0-r8, fluent-operator-fips 3.5.0-r2, fluent-operator-fips 3.6.0-r4, fluent-operator-fips 3.7.0-r2, flux-notification-controller-fips 1.5.0-r0, gitness 3.0.1-r1, gitness 3.1.1-r1, gitness 3.2.0-r1, gitness 3.3.0-r2, gostatsd 28.3.0-r2, gpu-operator 24.9.2-r1, grafana-alloy 1.14.2-r2, grafana-alloy 1.15.0-r0, grafana-mimir-fips 3.0.5-r1, grafana-rollout-operator 0.36.0-r0, harbor-scanner-trivy 0.35.1-r1, harbor-scanner-trivy-fips 0.35.1-r1, helm 4.0.5-r2, helm 4.1.3-r0, helm-fips 4.1.3-r0, helm-operator 1.42.1-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, ip-masq-agent 2.12.6-r1, istio 1.28.5-r3, istio 1.29.1-r1, istio-fips 1.25.5-r5, istio-fips 1.26.8-r2, istio-fips 1.27.8-r3, istio-fips 1.28.5-r3, istio-fips 1.29.1-r2, istio-pilot-discovery-fips 1.28.3-r1, jitsucom-bulker 2.10.0-r2, jitsucom-bulker 2.11.0-r0, jitsucom-bulker 2.8.6-r0, jitsucom-bulker 2.9.0-r0, k8ssandra-client-fips 0.5.0-r8, k8ssandra-client-fips 0.6.4-r7, k8ssandra-client-fips 0.7.0-r5, k8ssandra-client-fips 0.8.10-r1, k8ssandra-client-fips 0.8.9-r0, k8ssandra-operator 1.26.0-r0, k8ssandra-operator-fips 1.29.0-r1, kafka_exporter-fips 1.6.0-r1, kafka_exporter-fips 1.7.0-r2, karma 0.122-r0, karpenter 1.9.0-r0, karpenter-fips 1.9.0-r0, keda 2.19.0-r3, keda-fips 2.18.3-r3, kserve 0.16.0-r2, kserve-modelmesh-serving 0.12.0-r2, kube-fluentd-operator 1.18.2-r1, kube-rbac-proxy 0.20.2-r1, kube-rbac-proxy-fips 0.20.2-r1, kube-state-metrics 2.10.1-r1, kube-state-metrics 2.16.0-r3, kube-state-metrics-fips 2.18.0-r1, kube-vip 1.1.0-r0, kubernetes 1.34.1-r3, kubernetes 1.34.6-r1, kubernetes 1.35.3-r1, kubernetes-csi-driver-nfs-fips 4.12.1-r2, kubernetes-csi-external-attacher 4.10.0-r0, kubernetes-csi-external-attacher-fips 4.10.0-r0, kubernetes-csi-external-provisioner-fips 6.2.0-r2, kubernetes-csi-external-resizer 2.0.0-r0, kubernetes-csi-external-resizer-fips 2.0.0-r1, kubernetes-csi-external-resizer-fips 2.1.0-r1, kubernetes-csi-external-snapshotter-fips 8.4.0-r3, kubernetes-csi-external-snapshotter-fips 8.5.0-r2, kubernetes-csi-livenessprobe-fips 2.18.0-r2, kubernetes-csi-node-driver-registrar 2.13.0-r0, kubernetes-csi-node-driver-registrar-fips 2.15.0-r3, kubernetes-csi-node-driver-registrar-fips 2.16.0-r2, kubernetes-dashboard 7.14.0-r1, kubernetes-dashboard-api 1.14.0-r1, kubernetes-dashboard-api-fips 1.14.0-r1, kubernetes-dashboard-auth 1.4.0-r1, kubernetes-dashboard-auth-fips 1.4.0-r2, kubernetes-dashboard-fips 7.14.0-r0, kubernetes-dashboard-metrics-scraper 1.2.2-r2, kubernetes-dashboard-metrics-scraper-fips 1.2.2-r1, kubernetes-dashboard-web 1.7.0-r0, kubernetes-event-exporter 1.7-r1, kubernetes-event-exporter-fips 1.7-r0, kumactl 2.11.12-r0, kumactl 2.12.9-r0, kumactl 2.13.4-r0, kured 1.20.0-r0, kustomize-fips 5.8.1-r0, kyverno-fips 1.13.6-r10, kyverno-fips 1.16.3-r6, kyverno-fips 1.17.1-r5, kyverno-policy-reporter-fips 3.3.3-r5, kyverno-policy-reporter-fips 3.4.2-r5, kyverno-policy-reporter-fips 3.5.0-r5, kyverno-policy-reporter-fips 3.7.3-r2, kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r10, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r8, kyverno-policy-reporter-kyverno-plugin-fips 1.5.2-r4, linkerd2 25.12.3-r0, local-static-provisioner 2.8.0-r2, logstash-fips 9.2.7-r1, lvm-driver 1.7.0-r1, minio-operator-fips 5.0.19-r1, minio-operator-fips 6.0.4-r10, minio-operator-fips 7.1.1-r9, mongodb 7.0.30-r1, mongodb 7.0.31-r0, mongodb 8.0.20-r0, mongodb 8.2.5-r0, mountpoint-s3-csi-driver 2.3.0-r1, newrelic-nri-kube-events 2.16.4-r2, nginx-prometheus-exporter 1.5.1-r2, nginx-prometheus-exporter-fips 1.5.1-r1, nvidia-container-toolkit 1.19.0-r0, openbao-fips 2.1.1-r9, openbao-fips 2.2.2-r7, openbao-fips 2.4.4-r5, openbao-fips 2.5.1-r1, openbao-fips 2.5.1-r2, openbao-fips 2.5.2-r0, opensearch-k8s-operator-fips 2.5.1-r3, opensearch-k8s-operator-fips 2.6.1-r8, opensearch-k8s-operator-fips 2.8.0-r3, opentofu-fips 1.10.9-r5, opentofu-fips 1.11.5-r4, opentofu-fips 1.7.10-r4, opentofu-fips 1.8.11-r4, opentofu-fips 1.9.4-r5, paranoia 0.2.1-r0, paranoia 0.3.1-r0, paranoia 0.4.0-r0, percona-xtradb-cluster-operator 1.19.0-r0, percona-xtradb-cluster-operator-fips 1.18.0-r4, pmm 3.5.0-r0, prom-mysqld-exporter-fips 0.18.0-r3, prometheus 3.5.1-r1, prometheus-blackbox-exporter 0.28.0-r2, prometheus-mongodb-exporter 0.47.2-r1, prometheus-mongodb-exporter-fips 0.47.2-r1, prometheus-mysqld-exporter 0.15.0-r1, prometheus-mysqld-exporter-fips 0.19.0-r1, prometheus-operator 0.69.1-r1, prometheus-operator 0.87.1-r2, prometheus-redis-exporter-fips 1.77.0-r4, prometheus-redis-exporter-fips 1.78.0-r4, prometheus-redis-exporter-fips 1.79.0-r4, prometheus-redis-exporter-fips 1.80.2-r2, prometheus-redis-exporter-fips 1.81.0-r1, prometheus-redis-exporter-fips 1.82.0-r0, rabbitmq-cluster-operator 2.18.0-r0, rabbitmq-cluster-operator 2.20.0-r1, rabbitmq-messaging-topology-operator 1.16.0-r0, rclone 1.69.0-r1, renovate 43.123.8-r1, restic 0.18.0-r0, restic-fips 0.18.1-r3, sealed-secrets 0.33.1-r0, sealed-secrets 0.34.0-r0, sealed-secrets 0.36.1-r0, spark-operator 2.1.1-r6, spark-operator 2.2.1-r1, spark-operator 2.3.0-r3, spark-operator 2.4.0-r3, spark-operator 2.5.0-r0, stakater-reloader-fips 1.2.1-r3, stakater-reloader-fips 1.3.0-r2, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, tempo 2.10.3-r0, tempo 2.7.2-r1, tempo 2.8.3-r2, tempo 2.9.1-r0, tempo-fips 2.10.3-r0, tempo-fips 2.7.2-r0, tempo-fips 2.8.3-r0, tempo-fips 2.9.1-r0, temporal 1.5.1-r0, terragrunt-fips 0.94.0-r3, terragrunt-fips 0.95.1-r3, terragrunt-fips 0.96.1-r3, terragrunt-fips 0.97.2-r5, terragrunt-fips 0.98.0-r5, terragrunt-fips 0.99.5-r0, tigera-operator 1.41.1-r0, timoni 0.25.2-r0, trust-manager-fips 0.20.3-r1, trust-manager-fips 0.21.1-r1, vault 1.20.4-r2, vault 1.21.4-r2, vault-csi-provider 1.7.0-r0, velero 1.17.2-r2, velero-fips 1.17.2-r5, velero-plugin-for-aws 1.10.1-r3, velero-plugin-for-aws 1.12.2-r4, velero-plugin-for-aws 1.13.1-r3, velero-plugin-for-aws 1.14.0-r1, velero-plugin-for-gcp-fips 1.13.2-r1, velero-plugin-for-microsoft-azure-fips 1.13.1-r1, velero-plugin-for-microsoft-azure-fips 1.13.2-r1, velero-plugin-for-microsoft-azure-fips 1.14.0-r1, victoriametrics-vmauth 1.138.0-r0, wave 0.11.0-r1, wave-fips 0.9.0-r3, whereabouts 0.9.2-r2, yunikorn-k8shim 1.7.0-r2, yunikorn-k8shim-fips 1.7.0-r1, yunikorn-web 1.7.0-r0, yunikorn-web-fips 1.7.0-r0, zot 2.1.13-r2

CVE-2026-32280 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WP80268 Security fix for CVE-2026-46603 applied in: gitea 1.26.4-r2, gitea 1.27.2-r1, mailpit 1.29.7-r1, mailpit-fips 1.29.7-r1, ollama 0.32.13-r2, ollama 0.32.14-r1, ollama 0.32.15-r1, ollama-fips 0.32.13-r1, ollama-fips 0.32.14-r1, ollama-fips 0.32.15-r1

CVE-2026-46603 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GHSA-M4F3-G4CQ-HQRX vulnerabilities

Vulnerabilities for packages: awx, mlflow, checkov, mlflow-fips, datahub-ingestion-fips, datahub-ingestion, opal...

GHSA-JQFF-G426-HQXP vulnerabilities

Vulnerabilities for packages: argo-workflows, prism, opensearch-dashboards, unleash, unleash-proxy, unleash-fips, wazuh-dashboard-fips, arangodb, yaml-language-server, kibana, nextcloud-server, keep-fips, gitlab-rails-ce, tileserver-gl, langfuse, wazuh-dashboard, tileserver-gl-fips,...

PT-2026-84175

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 140.15 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird ESR versions prior to 140.15 Thunderbird ESR versions prior to 153.2 Description A...

Exploit for CVE-2026-64638

CVE-2026-64638 — XSS2Shell Proof of Concept A proof-of-concep...

EUVD-2026-54300

The official MonsterInsights Pro update distribution bucket monster-insights.s3.amazonaws.com was compromised. Both the current release 10.2.2 and the version MonsterInsights rolled back to 10.2.0 contain a malicious file, class-system-check.php. Three distinct variants were observed on 2026-06-1...

CVE-2026-11976

MonsterInsights Pro updates 10.2.0 and 10.2.2 were distributed from the official update bucket and contain a malicious file, class-system-check.php, due to a compromised AWS S3 bucket. Three distinct variants were observed on 2026-06-11, all using the same AES-256-GCM key, indicating a single thr...

Exploit for CVE-2026-64633

CVE-2026-64633 Analysis Payloads...

UBUNTU-CVE-2026-69247

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7decryptder, pkcs7decryptpem, and pkcs7decryptsmime reported the outcome of decrypting a RecipientInfo's encryptedKey in several distinguishable ways, one of which...