PT-2026-90903

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2 edit, the di height field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem...

PT-2026-95382

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.12.1 Description An issue exists in the apply trap of the bridge lib/bridge.js where a nullish this receiver is not correctly handled. When sandboxed code invokes a host-provided non-strict sloppy-mode function without ...

CVE-2026-76174: Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admininfo endpoint. The application validates files solely based on the name provided by the client, without properly checking their content or securely restricting the permitted file types. This allows ...

CVE-2026-85053: Exposure of Resource to Wrong Sphere

Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-85017

Name of the Vulnerable Software and Affected Versions gfs2-utils affected versions not specified Description A stack out-of-bounds write issue exists in the gfs2 edit function. The di height field from on-disk inode metadata is used as an array index without proper bounds checking. This leads to ...

CVE-2026-85051: Access of Resource Using Incompatible Type

Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-85046: Access of Resource Using Incompatible Type

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

D-Link DIR-825M Firmware Code Execution

The vulnerability of the sub41802C function in the /boafrm/formLtefotaUpgradeFibocom file of the LTE Module Firmware Upgrade component of the D-Link DIR-825M router’s microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability coul...

Business Connectivity Services Framework Code Execution

The vulnerability of the Business Connectivity Services BCS framework in Microsoft SharePoint Server and SharePoint Enterprise Server stems from the insecure creation of .NET types through insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2026-71220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without...

Oracle Linux 9 : nginx:1.24 (ELSA-2026-59490)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59490 advisory. - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 - Resolves: RHEL-217962 -...

CVE-2026-18718 — Updated!

Advisory: GHSA-pcfh-853f-q3gh · Severity: High CVSS 7.5 · Affected: Ghidra ≤ 12.1.2 · Fixed: c03a70d Ghidra 12.1.3 Opening someone else's Ghidra project was enough to execute their code. Ghidra 12.1.2 stores analyzer options inside the program database , and one of those options is a filesystem...

EUVD-2026-64018

Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools...

Undocumented-RCE-in-PLY — Updated!

Undocumented Remote Code Execution in PLY CVE‑2025‑56005 root@kitploit: CVE ID: CVE‑2025‑56005 Disclosure Date: July 1, 2025 Affected Product: PLY Python Lex‑Yacc Affected Version: 3.11 PyPI distribution Vendor: PLY Python Lex‑Yacc Affected Component: ply/yacc.py — LRTable.readpickle via...

Exploit for Code Injection in Langflow

P...

CVE-2026-84452

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

CVE-2023-20577

A heap overflow in the SMM (System Management Mode) module of certain AMD processors allows a local, unauthenticated attacker with a second vulnerability enabling SPI flash writes to achieve arbitrary code execution . The flaw affects multiple AMD product lines including 2nd–4th Gen EPYC , Ryzen ...

EUVD-2023-60617

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...

CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the deserialization process of cached performance reports stored in the build directory on the controller. An attacker can execute arbitrary code by providing maliciously crafted serialized data,...