PT-2026-106901

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A confused deputy issue in Google Lens allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a...

PT-2026-107039

Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...

PT-2026-107098

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A race condition in Fonts allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. A race condition occurs...

PT-2026-107302

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 1.14.6 Backstage versions prior to 1.15.4 Description The @backstage/plugin-techdocs-node package contains a flaw in the techdocs backend that allows a bypass of the mkdocs configuration sanitizer. Users capable of...

Google Chrome < 155.0.8059.39 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 155.0.8059.39. It is, therefore, affected by multiple vulnerabilities as referenced in the 202610stable-channel-update-for-desktop086471744 advisory. - Use after free in ANGLE in Google Chrome on on Android prior to...

AlmaLinux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791296305)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791296305 advisory. - A flaw was found in GIMP's PSP Paint Shop Pro file parser. A remote attacker could exploit an integer overflow vulnerability in th...

ROS-20261006-73-0012

The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

SUSE SLES16: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:23984-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23984-1 advisory. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. -...

SUSE SLES16 Security Update : sccache (SUSE-SU-2026:23983-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23983-1 advisory. - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243868. - CVE-2026-25541:...

Apache Ratis 3.3.1 Java Deserialization

Apache Ratis versions 3.3.0 and 3.3.1 contain an unsafe Java deserialization vulnerability in RPC reply error handling that can allow remote code execution on a client with a suitable gadget chain. !/usr/bin/env python Apache Ratis 3.3.1 Java Deserialization Vendor: The Apache Software Foundation...

Apache Curator 5.9.0 Java Deserialization

Apache Curator version 5.9.0 contains an unsafe Jackson deserialization issue in its service-discovery component that can instantiate an attacker-controlled payload class. !/usr/bin/env python Apache Curator 5.9.0 Java Deserialization Vendor: The Apache Software Foundation Product web page:...

Stack-based buffer overflow vulnerability exists in the Brocade Fabric OS SNMP daemon handling

: A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly...

Heap-Based Buffer Overflow in Port List Parsing within Brocade Fabric OS

: When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can...

Stack-based Buffer Overflow in REST API device management component of Brocade Fabric OS

: Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads—such as device configuration attributes or port mapping requests—the REST API service fails to properly validate...

A memory buffer overflow vulnerability exists in an internal diagnostic routine of Brocade Fabric OS (CVE-2026-94582)

: A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First FSPF protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directl...

CVE-2023-43878-RiteCMS-Stored-XSS---MainMenu

Rite CMS v3.0 Multiple Stored XSS Author: Sergio Description: Rite CMS 3.0 is affected by a Multiple Cross-Site scripting XSS stored vulnerability that allows attackers to execute arbitrary code via a crafted payload i to the Main Menu - Items in the Administration Menu. Attack Vectors:...

CVE-2023-41436-CSZ-CMS-Stored-XSS---Pages-Content

CSZ CMS Stored XSS v1.3.0 Author: Sergio CVE: 2023-41436 Description: Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Pages Content Menu component. Attack Vectors:...

EUVD-2026-87858

vm2: NodeVM custom resolution bypasses external path boundaries...

CVE-2024-6387

0. TL;DR Esto es esencialmente una vulnerabilidad estadística: requiere un gran número de intentos para ganar la condición de carrera y ejecutar código arbitrario con éxito. Los atacantes necesitan superar muchos obstáculos", dijo Schwartz a SecurityWeek. "Incluso en el mejor de los casos, las...

CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...