OESA-2026-4061 python-templated-dictionary security update

Dictionary where getitem is run through Jinja2 template. Security Fixes: The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges. This weakness stems from the absence of prope...

OESA-2026-4025 python-GitPython security update

GitPythonis a python library used to interact with Git repositories.GitPython provides object model read and write access to your git repository. Access repository information conveniently, alter the index directly, handle remotes, or go down to low-level object database access with big-files...

OESA-2026-4026 python-GitPython security update

GitPythonis a python library used to interact with Git repositories.GitPython provides object model read and write access to your git repository. Access repository information conveniently, alter the index directly, handle remotes, or go down to low-level object database access with big-files...

EUVD-2026-86479

IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated with base6...

CVE-2026-88420

A reflected cross-site scripting XSS vulnerability in the EntryAbstract.save component of APSL puput v1.2.1 through v2.2.0 allows authenticated attackers with Wagtail Editor privileges to execute arbitrary code in the context of the victim's browser via a crafted payload...

CVE-2026-85029: Improper Limitation of a Pathname to a Restricted Directory

IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limitation of a pathname to a restricted directory...

CVE-2026-78902

A Cross Site Scripting (XSS) vulnerability exists in Netgate pfSense 26.03.1-RELEASE . This flaw specifically affects the pfBlockerNG package , potentially allowing an attacker to achieve arbitrary code execution . No specific remediation or exploit details are provided in the documents.

CVE-2026-78902: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...

CVE-2026-78902

Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...

PT-2026-99099

Name of the Vulnerable Software and Affected Versions GNU libextractor versions prior to 1.16 Description The software loads plugins from an untrusted search path defined by the LIBEXTRACTOR PREFIX environment variable without performing proper privilege checks. A local attacker can manipulate th...

PT-2026-99116

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The SOAP HTTP client contains a flaw in how it manages response buffer growth. The system uses a check based on signed integer overflow, which is considered...

CVE-2026-88420: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the EntryAbstract.save component of APSL puput v1.2.1 through v2.2.0 allows authenticated attackers with Wagtail Editor privileges to execute arbitrary code in the context of the victim's browser via a crafted payload...

The vulnerability of the Linux operating system’s kernel, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Perl-DBI interface for connecting to and working with databases lies in the use of externally controlled input data for selecting classes. This allows a malicious actor to execute arbitrary code.

The vulnerability of the Perl-DBI interface for connecting to and working with databases involves the use of externally controlled input data for class selection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the golang-x-net package in the Golang programming language arises from improper checking of the unsafe equivalence of input data. This allows attackers to circumvent existing security restrictions and execute arbitrary code.

The vulnerability of the golang-x-net package in the Golang programming language is related to improper checking of unsafe equivalence of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code...

The vulnerability of the Vim text editor, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to overflowing the buffer in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Vim text editor, related to the use of an incomplete black list, allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Linux operating system’s kernel, related to insufficient control over resources with dynamic management, allows a hacker to execute arbitrary code.

The vulnerability of the Linux operating system’s kernel is related to insufficient control over resources with dynamic management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the TDSC video decoder in the FFmpeg multimedia library allows a hacker to corrupt memory, cause system failures, or execute arbitrary code.

The vulnerability of the TDSC video decoder in the FFmpeg multimedia library relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to damage memory, cause system failures, or execute arbitrary code...

The vulnerability of the video filter vf_swaprect in the FFmpeg multimedia library allows a hacker to damage memory, cause system failures, or execute arbitrary code.

The vulnerability of the vfswaprect video filter in the FFmpeg multimedia library is related to incorrect calculation of the buffer size. Exploiting this vulnerability can allow attackers to corrupt memory, cause service failures, or execute arbitrary code...