YARA-X 1.20.0

YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malware...

Microsoft .net Core SEoL (8.x)

According to its version, Microsoft .net Core is 8.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

PT-2026-80826

Unauthenticated Cross Site Scripting XSS in Events Made Easy = 3.2.5 versions...

PT-2026-81055

Unauthenticated PHP Object Injection in WP Project Manager = 4.0.6 versions...

PT-2026-80840

Unauthenticated Cross Site Scripting XSS in Urna = 2.6.2 versions...

PT-2026-81046

Name of the Vulnerable Software and Affected Versions WooBeWoo Product Filter Pro versions prior to 3.1.9 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes t...

PT-2026-80828

Unauthenticated Cross Site Scripting XSS in Tourmaster = 5.4.9 versions...

PT-2026-80196

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

PT-2026-81057

Name of the Vulnerable Software and Affected Versions Toolset Blocks versions 1.6.26 and earlier Description Unauthenticated Cross-Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update Toolset Blocks to...

PT-2026-80844

Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...

PT-2026-81051

Name of the Vulnerable Software and Affected Versions Booking Hub versions 1.3.0 and earlier Description An issue exists that allows a user with Subscriber privileges to escalate their privileges within the system. Recommendations Update Booking Hub to a version later than 1.3.0...

PT-2026-81047

Name of the Vulnerable Software and Affected Versions Boost versions 2.0.4 and earlier Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database...

PT-2026-80824

Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...

PT-2026-80195

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

PT-2026-81056

Name of the Vulnerable Software and Affected Versions Event Tickets versions 5.29.2.1 and earlier Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update Event Tickets to...

PT-2026-80817

Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.6 versions...

PT-2026-80816

Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...

Microsoft .net Core SEoL (9.x)

According to its version, Microsoft .net Core is 9.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

Fedora 46 : python-aiohttp (2026-84f7af8f97)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-84f7af8f97 advisory. Automatic update for python-aiohttp-3.14.3-3.fc46. Changelog Mon Aug 24 2026 Benjamin A. Beasley - 3.14.3-3 - Preemptively patch for Cython 3.3...

firefox security update

140.14.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.14.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.14.0-1 - Update to 140.14.0 ESR...