RHEL 9 : RHEL AI 3.0 RPM runtime CVE fix - ffmpeg (Moderate) (RHSA-2026:74089)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74089 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...

AlmaLinux 9.2 [TuxCare] Security Update: webkit2gtk3 / webkit2gtk3-devel / webkit2gtk3-jsc / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1762362132)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762362132 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 7 [TuxCare] Security Update: openssh / openssh-askpass / openssh-cavs / openssh-clients / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1754941200)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1754941200 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Debian dsa-6533 : firefox-esr - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6533 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6533-1 [email protected] https://www.debian.org/securit...

AlmaLinux 9.2 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1757501175)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1757501175 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

AlmaLinux 9.2 [TuxCare] Security Update: java-17-openjdk / java-17-openjdk-demo / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1754043770)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1754043770 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 8 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2025:1754381655)

The CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2025:1754381655 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CVE-2026-84939 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

CVE-2026-100794

creationtimestamp| type| source ---|---|--- 2026-09-29 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities20260930 2026-10-01 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities20261002...

CVE-2026-100787

creationtimestamp| type| source ---|---|--- 2026-09-29 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities20260930 2026-10-01 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities20261002...

CVE-2026-100816

creationtimestamp| type| source ---|---|--- 2026-09-29 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities20260930 2026-10-01 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities20261002...

CVE-2026-100814

creationtimestamp| type| source ---|---|--- 2026-09-29 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities20260930 2026-10-01 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities20261002...

CVE-2026-100803

creationtimestamp| type| source ---|---|--- 2026-09-29 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities20260930 2026-10-01 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities20261002...

CVE-2026-102314

creationtimestamp| type| source ---|---|--- 2026-09-29 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260930...

CVE-2026-102321

creationtimestamp| type| source ---|---|--- 2026-09-29 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260930 2026-10-01 15:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mwt54i4ahs2y...

CVE-2026-102330

creationtimestamp| type| source ---|---|--- 2026-09-29 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260930...

CVE-2026-102305

creationtimestamp| type| source ---|---|--- 2026-09-29 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260930...

openclaw_vulnerabilities_and_solutions

OpenClaw — vulnerabilities, hardening, and VPS deployment Санитизированная публичная документация по безопасному развёртыванию OpenClaw на VPS: архитектура доступа, известные уязвимости и практические инциденты с решениями. Public, sanitized documentation from real OpenClaw operations: how to...

Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js

GitHub CVE Scanner 🔍 Quickly scan GitHub repositories for critical React and Next.js RSC vulnerabilities Overview A browser-based scanner that checks all GitHub repositories for known security vulnerabilities in React Server Components: CVE| Packages| Severity| Description ---|---|---|---...

presentations

私のプレゼンテーション その他の資料は私の個人サイトで見つけることができます: https://sites.google.com/site/zhiniangpeng EXSi の preauth RCE とサンドボックスエスケープの脆弱性の悪用, Typhooncon 2023 OLE オブジェクトは今も危険 — Microsoft Office の悪用, POC 2023 Django-Simple-Captcha — JumpServer の Preauth RCE, Mosec BaijiuCon 2023 APT vs GPT, 2023 年 Campus Talk vSpher...