171310 matches found
CVE-2026-19672
A flaw was found in the Python tarfile module. This vulnerability allows an attacker to create empty directories outside of the intended extraction destination on POSIX Portable Operating System Interface platforms. This occurs when processing a specially crafted archive containing member names...
lab-atox
🎯 LAB-RED Team — Account Takeover via XSS Tugas Kuliah Keamana...
CVE-2026-62646
A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A session identifier is generated using an algorithm with insufficient randomness, resulting in a token with low entropy that can be predicted or brute-forced within a feasible number of attempts. This could allow an...
CVE-2026-62646
CVE-2026-62646 affects Reyrolle 7SR5 (all versions prior to V2.70 ), a Siemens industrial communication gateway. The vulnerability resides in the session identifier generation mechanism: an algorithm with insufficient randomness produces low-entropy tokens that can be predicted or brute-forced. A...
EUVD-2026-72661
A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A session identifier is generated using an algorithm with insufficient randomness, resulting in a token with low entropy that can be predicted or brute-forced within a feasible number of attempts. This could allow an...
CVE-2026-62646
A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A session identifier is generated using an algorithm with insufficient randomness, resulting in a token with low entropy that can be predicted or brute-forced within a feasible number of attempts. This could allow an...
Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.22.3 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.22.3 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.22.3 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-10056: Backport to odf-4.22.z IBMSupportCapturing the db dump is failing in ODF 4.19 DFBUGS-9935: ODF 4.22....
Watcher v3.5.3
AI-Powered Automated Cybersecurity Threat Detection Platform Watcher is a Django & React JS platform designed to discover and monitor emerging cybersecurity threats with AI-powered threat intelligence analysis. It can be deployed on webservers or quickly run via Docker. Watcher Capabilities Watch...
Security update for python-GitPython
This update for python-GitPython fixes the following issues: CVE-2026-42215: command injection via Git options bypass bsc1264604. CVE-2026-42284: unsafe option check validates multioptions before shlex.split transforms it bsc1264605. CVE-2026-44243: path traversal in GitPython reference APIs allo...
SUSE-SU-2026:4072-1 Security update for python-GitPython
This update for python-GitPython fixes the following issues: - CVE-2026-42215: command injection via Git options bypass bsc1264604. - CVE-2026-42284: unsafe option check validates multioptions before shlex.split transforms it bsc1264605. - CVE-2026-44243: path traversal in GitPython reference API...
Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issue: CVE-2026-81928: memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record bsc1278084. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
SUSE-SU-2026:4065-1 Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issue: - CVE-2026-81928: memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record bsc1278084...
Moderate: Red Hat Security Advisory: xz security update
An update for xz is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...
nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service
A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...
log-horizon v0.9.0
Microsoft Sentinel SIEM Log Source Analyzer I've had to answer "what are we actually getting out of these logs?" or "what is the recommended logs for Microsoft Sentinel" more times than I can count. The answer always depend on so many things, but we can be generic. So I built this thingy right...
raptor v3.1.0
root@kitploit: ╔═══════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██████╗ █████╗ ██████╗ ████████╗ ██████╗ ██████╗ ║ ║ ██╔══██╗██╔══██╗██╔══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ║ ║ ██████╔╝███████║██████╔╝ ██║ ██║ ██║██████╔╝ ║ ║ ██╔══██╗██╔══██║██╔═══╝ ██║ ██║ ██║██╔══█...
PT-2026-88511
Impact The GitHub Trigger generated a signing secret when it registered a webhook and verified X-Hub-Signature-256 on each delivery. When GitHub answered the create request with a 422 because a webhook for the URL already existed, the node adopted the remote hook but kept only its id and events,...
PT-2026-88337
HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and renderers that emit a form's errors interpolate the error string straight into HTML with no escaping. Two of the library's own messages, no...
PT-2026-87420
Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network...
PT-2026-87188
Impact The OAuth token endpoint bound an authorization code's first access token to the consented resource, but not its refresh token. Refreshing only checked that the requested resource was registered, not that it matched the original grant. An OAuth client approved for one workflow could refres...