CVE-2026-90783

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

CVE-2026-90678

An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QUIC support and configured with a QUIC bind listener, and the affected traffic must reach a backend over HTTP/1.1 using chunked transfer...

CVE-2026-36453

Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be accessed via extra variables...

CVE-2026-29811

CyberPanel before 2.4.4 attempts to detect an "alais" domain i.e., a second domain that serves the same content as a primary domain; normally spelled "alias" via an ORM query filter rather than a Python "if" statement...

PT-2026-90960

Name of the Vulnerable Software and Affected Versions LuxSoft LuxCal versions prior to 5.3.4L Description A SQL Injection issue exists where an attacker can interfere with the queries that an application makes to its database. This occurs via the 'rssfeed.php' and 'common/retrieve.php' endpoints...

EUVD-2026-77074

CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic...

CVE-2025-70820

Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder...

CVE-2026-29810

CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic...

CLSA-2026-1789219285 TuxCare security update for 123 packages (4 CVEs)

TuxCare rebuilt 123 packages to address 4 CVEs. Fixed in 11.0.32.tuxcare0001...

CVE-2026-90472

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger...

CVE-2021-47928

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:08+00:00| seen| https://t.me/shimiscyberworld/1340 2026-09-13 00:00:41+00:00| seen| https://t.me/shimiscyberworld/1340...

WordPress Masteriyo LMS plugin < 3.4.1 - Instructor+ Stored XSS vulnerability

Instructor+ Stored XSS vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Masteriyo - LMS versions 3.4.1...

Updated perl-Catalyst-Plugin-Static-Simple packages fix a security vulnerability

Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable...

EUVD-2026-76736

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

Linux Distros Unpatched Vulnerability : CVE-2026-89608

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ecryptfs: pass packet set buffer size to parser ecryptfsparsepacketset receives a pointer into the file header, but it calculates the remaining packet buffer si...

PT-2026-90938

These are all security issues fixed in the zstd-jni-1.5.7.16-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 45 : pdns-recursor (2026-6c1e0af917)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6c1e0af917 advisory. Update to 5.4.6 Resolves: rhbz2527899 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 45 : libpcap (2026-c3fb234b87)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c3fb234b87 advisory. New version 10.7.1 Fix for CVE-2026-0799, CVE-2026-6244, CVE-2026-6554, CVE-2026-18238, CVE-2026-18313, CVE-2026-31911, CVE-2026-31912 Tenable has...

Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities

Background Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with...

CVE-2026-44210 affecting package kata-containers-cc for versions less than 3.15.0.aks0-20

CVE-2026-44210 affecting package kata-containers-cc for versions less than 3.15.0.aks0-20. A patched version of the package is available...