AlmaLinux 9 : gstreamer1-plugins-good (ALSA-2026:59152)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59152 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution vi...

CVE-2026-52103

SimpleX Chat versions before v6.5 are affected by a zero-click remote code execution vulnerability in the /Terminal/Notification.hs component. An attacker can send a crafted payload in a text message to execute arbitrary commands in the context of the application without any user interaction. The...

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account...

ALSA-2026:59972 Important: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: flink (UTSA-2026-093572)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093572 advisory. Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...

Linux Distros Unpatched Vulnerability : CVE-2026-79027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network...

Linux Distros Unpatched Vulnerability : CVE-2026-79657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific...

CVE-2026-39275

Cockpit CMS versions ≤ 2.13.5 are affected by a stored XSS (CWE-79) in the item.php, field-select.js, and tags.js components. Field render() outputs are passed to Vue's v-html directive without output encoding , allowing a low-privilege editor to inject a persistent payload that fires for every a...

AlmaLinux 10 : gstreamer1-plugins-good (ALSA-2026:59972)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:59972 advisory. gstreamer: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay CVE-2026-18299 Tenable has extracted the preceding description block directly from...

AlmaLinux 10 : gstreamer1-plugins-good (ALSA-2026:59133)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59133 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution v...

Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

Ajax.NET Professional AjaxPro contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users are advised to discontinue use and/or transition to a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: datanucleus-core (UTSA-2026-093032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093032 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

PT-2026-82214

ILIAS deserialises stored session data for an unauthenticated caller. The Shibboleth back-channel endpoint at components/ILIAS/AuthShibboleth/resources/shib logout.php runs in a context that ilInitialisation exempts from authentication, and its logout-notification handler locates the session to...

PT-2026-81951

Name of the Vulnerable Software and Affected Versions Avada versions prior to 7.16.1 Fusion Builder versions prior to 3.16.1 Description An unauthenticated attacker can achieve remote code execution and complete site compromise by writing attacker-controlled PHP files to the server. This is...

RHEL 10 : gstreamer1-plugins-good (RHSA-2026:59972)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59972 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a...

RockyLinux 10 : gstreamer1-plugins-good (RLSA-2026:59972)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:59972 advisory. gstreamer: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay CVE-2026-18299 Tenable has extracted the preceding description block directly from...

PT-2026-82254

Name of the Vulnerable Software and Affected Versions Dell PowerProtect One versions 20.1.0.0 and earlier Description An improper neutralization of special elements used in an OS command allows a low privileged attacker with remote access to perform OS Command Injection, which can lead to remote...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: wildfly-build-tools (UTSA-2026-022372)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022372 advisory. Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...

Triage-CVE-2021-26855-ProxyLogon---Microsoft-Exchange-

Triage: CVE-2021-26855 ProxyLogon - Microsoft Exchange Per questo laboratorio, l'obiettivo era esercitarsi nel triage di una vulnerabilità reale e nota, come farebbe un team di sicurezza: leggere i dettagli della CVE, comprendere il punteggio CVSS e ragionare su quanto sia effettivamente rischios...

CVE-2021-43503

Avviso La vulnerabilità è stata revocata Override Questo riguarda CVE-2021-43503, non sono riuscito a replicare questa vulnerabilità attraverso exp Requisiti PHP 7.1. Composer registrar=$b; namespace Illuminate\Queue\Capsule class Manager protected $manager; public function construct$c...