490110 matches found
UBUNTU-CVE-2026-71832
Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrenthelper.cc, which allows a remote malicious user to cause a Denial of Service...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update
An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...
bbot v3.0.2
BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon , Bug Bounties , and ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 A BBOT scan in real-time - visualization withVivaGraphJS Installation root@kitploit:...
Important: Red Hat Security Advisory: Red Hat AI Inference Server 3.3.6 (CUDA)
Red Hat AI Inference Server 3.3.6 CUDA is now available. Red Hat® AI Inference Server...
Malicious code in @gsas/gsas-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2242b683433d5fe37b3997185d251799a4606a456e516da08586775d11f0cb7e @gsas/[email protected] is a high-version public-registry squat targeting an internal @gsas/gsas-sdk name. package.json declares preinstall: node...
ROOT-OS-DEBIAN-13-CVE-2026-48962 CVE-2026-48962 in perl - Patched by Root
Root has patched CVE-2026-48962 in the perl package for Root:Debian:13. Multiple fixed versions available...
CVE-2026-12556
HP Easy Start for macOS versions prior to 2.16.7.260722 contain potential security vulnerabilities that may lead to escalation of privilege . HP's CVSS 4.0 rating is 7.7 (HIGH) , with a network attack vector, low complexity, and low privileges required, yielding high impact on the vulnerable syst...
@activepieces/piece-ai (>=0.3.1, <=0.3.4), @diviops/mcp-server (>=1.5.40, <=1.5.43) +26 more potentially affected by CVE-2026-76172 via fast-uri (>=3.0.1, <=3.1.5)
fast-uri NPM version =3.0.1, =0.3.1, =1.5.40, =1.6.0, =1.4.2, =1.2.0, =5.4.3, =0.2.0-alpha.5, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2026-76172 Source advisory: SNYK:JS-FASTURI-19256869...
MAL-2026-14444 Malicious code in msrcpoc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 57de2918e25798c84b17d6a743fbadb99a5e564b8ea34e1ab5d4a0ff6d509df0 The OpenSSF Package Analysis project identified 'msrcpoc' @ 99.1.9 pypi as malicious. It is considered malicious because: - The package executes...
CVE-2026-78247
A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...
WordPress AutomatorWP plugin <= 5.8.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ugur Ozer in WordPress Plugin AutomatorWP versions = 5.8.3...
WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by ChuongVN in WordPress Plugin TranslatePress versions = 3.3.2...
ROOT-APP-MAVEN-CVE-2017-15095 CVE-2017-15095 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2017-15095 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2018-5968 CVE-2018-5968 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2018-5968 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2020-36181 CVE-2020-36181 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2020-36181 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
squid SQUID_7_7
SQUID Web Proxy Cache http://www.squid-cache.org/ Copyright C 1996-2026 The Squid Software Foundation and contributors Squid software is distributed under GPLv2+ license and includes contributions from numerous individuals and organizations. Please see the COPYING and CONTRIBUTORS files for...
WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - PHP Object Injection vulnerability
WordPress ACPT Pro - Custom Post Types Plugin for WordPress plugin = 2.0.63 - PHP Object Injection vulnerability discovered by VDsec in WordPress Plugin ACPT Pro - Custom Post Types Plugin for WordPress versions = 2.0.63...
CVE-2026-78278
Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...