CVE-2026-76148

CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product...

CVE-2026-76148

CorvusSKK is affected by a code injection vulnerability that may allow an attacker to achieve arbitrary code execution on the target system. The attack vector is local, requires user interaction, and needs no prior privileges, with high impact on confidentiality, integrity, and availability (CVSS...

CVE-2026-76148

CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product...

CVE-2026-76148

CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product...

CVE-2026-76148

CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product...

CVE-2026-76148

CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product...

CVE-2026-80214

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server...

SUSE CVE-2026-78676

GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath. Attackers can craft config files with embedded newlines that become live git directives after any unrelated...

PT-2026-82234

Name of the Vulnerable Software and Affected Versions whichllm versions prior to 0.5.16 Description A code injection issue exists in the run and snippet commands. A remote attacker controlling a HuggingFace repository can achieve arbitrary code execution by crafting a malicious GGUF filename...

Linux Distros Unpatched Vulnerability : CVE-2026-79139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to...

CVE-2026-80214: Improper Neutralization of Special Elements used in an OS Command

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server...

PT-2026-81957

The Pods WordPress plugin before 3.3.9.1 does not correctly compare a display callback against its list of blocked functions, allowing users with the author role and above to execute arbitrary code on the server. Only sites using the restricted display-callback mode are affected, which is the...

PT-2026-81932

CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product...

CVE-2025-70290

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104765 advisory. Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would no...

Linux Distros Unpatched Vulnerability : CVE-2026-79175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to...

CVE-2026-39275

Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and tags.js components...

CVE-2026-74851: Improper Control of Generation of Code

The Pods WordPress plugin before 3.3.9.1 does not correctly compare a display callback against its list of blocked functions, allowing users with the author role and above to execute arbitrary code on the server. Only sites using the restricted display-callback mode are affected, which is the...

CVE-2026-58096: Improper Handling of Length Parameter Inconsistency

LcpDecodeConfig did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717. Undersized options would trigger an out-of-bounds write. A malicious PPP peer can exploit CVE-2026-58095 and CVE-2026-58096 to crash ppp8 or potentially execute arbitra...

CVE-2026-58097: Improper Handling of Length Parameter Inconsistency

mpSetEnddisc copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp8 command interface. A local user with access to the ppp8 command interface can crash ppp8 or potentially execute arbitrary code as root...