RHEL 9 : gegl04 (RHSA-2026:62170)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:62170 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: gegl: GIMP: Remote code execution via integer...

PT-2026-84599

The DevKit Pro plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.3.0. This is due to a missing capability check and missing nonce validation in the DPDEV install themes func function registered on the wp ajax DPDEV install themes action. This makes it...

Marimo 0.20.4 - RCE

Title: Marimo 0.20.4 - RCE Date: August 2nd, 2026 Exploit Author: Jason Bernier Vendor Homepage: https://marimo.io/ Software Link: https://github.com/marimo-team/marimo Version: str: """Send command to target and receive output""" try: if not conn: print"- No active connection" return ""...

SonicWall SMA1000 Appliances OS Command Injection Vulnerability

SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution...

AppNitro MachForm 30 Shell Upload

AppNitro MachForm version 30 suffers from a remote shell upload vulnerability. CVE-2026-78839 Description An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file. Successful exploitation of this issue requires t...

ALSA-2026:62425 Important: gegl security update

GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

The vulnerability of the setUrlFilterRules interface in the /lib/cste_modules/firewall.so module of the TOTOLINK A950RG router’s microprogramming system allows a malicious actor to execute arbitrary code or cause a service failure.

The vulnerability of the setUrlFilterRules interface in the /lib/cstemodules/firewall.so module of the TOTOLINK A950RG router’s microprogramming system is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures remotely...

Ghost_CMS 6.19.0 - Remote Code Execution

Exploit Title: GhostCMS 6.19.0 - Remote Code Execution Date: 08/07/2026 Exploit Author: Maksim Rogov Vendor Homepage: https://ghost.org/ Software Link: https://ghost.org/ Version: = 0.7.2, 'Ghost CMS Remote Code Execution', 'Description' = %q This module exploits a Remote Code Execution RCE...

...[ More ]

This Metasploit module exploits CVE-2026-48558 to forge an OpenID Connect identity token and obtain a SimpleHelp technician session. It then uses SimpleHelps legitimate remote access WebSocket protocol to connect to an online managed machine and execute a payload through the remote terminal. An...

Important: gegl security update

GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

Langflow 1.10.0 - RCE

Exploit Title: Langflow 1.10.0 - RCE Exploit Author: Richard Howe Vendor Homepage: https://www.langflow.org/ Software Link: https://www.langflow.org/desktop Version: str: endpoint = '/api/v1/autologin' headers = 'Content-Type': 'application/json', try: resp = getbaseurl + endpoint except Exceptio...

Deserialization vulnerability

Jenkins uses serialization and deserialization to load and save configuration and build data using XStream. Types storing their configuration in their own files usually config.xml or build.xml, like agents, items, or builds, are indicated as such by implementing the Java interface PersistenceRoot...

ALSA-2026:62420 Important: gegl04 security update

GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

ROS-20260902-73-0002

The vulnerability in mongodb-org is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260902-73-0027

The vulnerability in PHP is related to overflow of buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260902-73-0025

The vulnerability in PHP is related to overflow of buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260902-73-0010

The vulnerability of the MongoDB database management system’s time series collection implementation is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

ROS-20260902-73-0026

The vulnerability in PHP is related to overflow of buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-84768

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.580 Jenkins LTS versions prior to 2.568.3 Description Objects that store their configuration in independent top-level configuration files, such as jobs and global configuration, can be smuggled as nested field value...

PT-2026-84794

Jenkins File Parameter Plugin 425.v3fa 801681b 5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which can lead to remote code execution...