Glances - Information Disclosure

Glances 4.5.2 contains an information disclosure vulnerability caused by the web server running without authentication by default, letting remote attackers access sensitive system information including credentials, exploit requires no special privileges. id: CVE-2026-32596 info: name: Glances -...

OpenCATS - Command Injection

OpenCATS prior to commit 3002a29 contains a command injection caused by injection of PHP statements into the installer AJAX endpoint's databaseConnectivity action parameter, letting unauthenticated attackers execute arbitrary code, exploit requires incomplete installation wizard. id: CVE-2026-277...

URL Shortify <= 1.12.1 - Open Redirect

The URL Shortify plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.12.1 due to insufficient validation on the 'redirectto' parameter in the promotional dismissal handler. This makes it possible for unauthenticated attackers to redirect users to potentiall...

Fix-CVE-2017-1000117

Repositorio de prueba para verificar la vulnerabilidad de Git CVE-2017-1000117, e intentar actualizar la versión de Git. $ git clone --recursive https://github.com/shogo82148/Fix-CVE-2017-1000117.git El repositorio está inspirado en https://github.com/greymd/CVE-2017-1000117 . Para asegurarte de...

Fedora 45 : memcached (2026-fb82981047)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fb82981047 advisory. Rebase to 1.6.45 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

perl-GD security update

2.49-3.0.1 - Security update for CVE-2026-11526 Orabug: 39825996...

SUSE-SU-2026:23514-1 Security update for libpng16

This update for libpng16 fixes the following issues: Changes for libpng16: - Version update to 1.6.58 jscPED-16190...

Oracle Linux 9 : ELSA-2026-61383-0: / nodejs:22 (ELSA-2026-613830)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-613830 advisory. - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 nodejs-nodemon Tenable...

CVE-2026-73194 affecting package perl-DBI for versions less than 1.652-1

CVE-2026-73194 affecting package perl-DBI for versions less than 1.652-1. An upgraded version of the package is available that resolves this issue...

OPENSUSE-SU-2026:21653-1 Security update for v2ray-core

This update for v2ray-core fixes the following issues: Changes in v2ray-core: - Update version to 5.53.0 Add X-Forwarded-For support to gRPC transport Add Stream based Packet Addr for UDP Connections rrpit: compact session, async send, session recovery Add socks5ify engineering command Fix bugs...

CVE-2026-14677 affecting package postgresql for versions less than 16.15-1

CVE-2026-14677 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73071 affecting package vim for versions less than 9.2.0957-1

CVE-2026-73071 affecting package vim for versions less than 9.2.0957-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53786 affecting package rsync for versions less than 3.5.0-1

CVE-2026-53786 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...

CVE-2026-48911 Apache Answer: Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation Flow

Insufficient Verification of Data Authenticity vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. A missing authorization check in the external-login email binding flow allows unauthenticated attackers to take over arbitrary user accounts by tricking victims into...

CVE-2026-67588 Apache Qpid ProtonJ2: Unbounded symbol value caching can lead to pre-authentication resource exhaustion

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

CLSA-2026-1785291224 TuxCare security update for shelljs (2 CVEs)

TuxCare rebuilt shelljs to address 2 CVEs. Fixed in 0.8.4-tuxcare.1...

CLSA-2026-1783645399 TuxCare security update for io.projectreactor.netty (1 CVE)

TuxCare rebuilt 4 io.projectreactor.netty packages to address 1 CVE. Fixed in 1.0.32-tuxcare.3...

CLSA-2026-1777423183 TuxCare security update for aiohttp (4 CVEs)

TuxCare rebuilt aiohttp to address 4 CVEs. Fixed in 3.8.4.post2+tuxcare...

CLSA-2026-1777509604 TuxCare security update for commons-collections (1 CVE)

TuxCare rebuilt 2 commons-collections packages to address 1 CVE. Fixed in 3.2.1-tuxcare.1...

CVE-2026-48031

go-base is a Go RESTful API Boilerplate template with JWT Authentication, backed by PostgreSQL. In versions prior to 2026-05-18, the JWT signing secret is hardcoded to the known string "random", letting any attacker who reads the public repository forge tokens for arbitrary users, including admin...