MiracleLinux 8 : kernel-4.18.0-553.141.2.el8_10 (AXSA:2026-1311:50)

"The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1311:50 advisory. kernel: tcp: fix potential race in tcpv6synrecvsock CVE-2026-43198 kernel: netfilter: nfnetlinkcthelper: fix OOB read in nfnlcthelperdumptable...

Debian dsa-6393 : ata-modules-6.12.90+deb13-armmp-di - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6393 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6393-1 [email protected] https://www.debian.org/securit...

PT-2026-62085

Name of the Vulnerable Software and Affected Versions exo-explore exo version 1.0.69 Description An issue allows a remote attacker to escalate privileges without authentication. This is possible through the 'GET /state' and 'DELETE /instance/instance id' endpoints, where instance id is a variable...

PT-2026-62087

Name of the Vulnerable Software and Affected Versions Crocus version 1.3.44 Description A SQL injection flaw allows a remote attacker to escalate privileges. This issue occurs through the RecordStateMapper.xml file. SQL injection is a technique where malicious SQL statements are inserted into ent...

ALSA-2026:42736 Important: acl security update

Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fixes: acl: Symlink traversal privilege escalation via libacl function...

Oracle Linux 9 : acl (ELSA-2026-42736)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42736 advisory. 2.4.0-1 - rebase to 2.4.0 to fix the following CVEs: - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions RHEL-186111 -...

PT-2026-61956

Name of the Vulnerable Software and Affected Versions snap-confine affected versions not specified Description A local privilege escalation issue exists in snap-confine, a core component used by Canonical snapd to create secure execution environments for snap applications. The flaw occurs in...

PT-2026-61877

Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153...

PT-2026-61891

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 Description A privilege escalation issue exists within the DOM: Content Processes component...

PT-2026-61908

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 Description Privilege escalation exists in WebExtensions, allowing an attacker to gain higher levels of...

KLA91167 Multiple vulnerabilities in Oracle Java

Multiple vulnerabilities were found in Oracle Java. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability can be exploited...

PT-2026-61878

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description A privilege escalation issue exists within the DOM Navigation component. Recommendations Update Firefox to version 153. Update Thunderbird to version 153...

SUSE SLES12: libipa_hbac-devel / libipa_hbac0 / libsss_certmap0 / etc (SUSE-SU-2026:3131-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3131-1 advisory. This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by...

RHEL 9 : sssd (RHSA-2026:42122)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42122 advisory. The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication...

PT-2026-61913

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description A privilege escalation issue exists within the Data Loss Prevention component. Recommendations Update Firefox to version 153. Update Thunderbird to version 153...

📄 WordPress JSON API User 3.9.2 Unauthenticated Privilege Escalation

WordPress JSON API User plugin version 3.9.2 contains an unauthenticated privilege escalation to administrator vulnerability through Mass-Assignment. A remote attacker can elevate privileges to the administrator role and take control of the affected site. This proof of concept exploit demonstrate...

📄 WordPress Simple User Capabilities 1.0 Unauthenticated Privilege Escalation

WordPress Simple User Capabilities plugin version 1.0 contains an unauthenticated privilege escalation to administrator vulnerability. A remote attacker can elevate privileges to the administrator role and take control of the affected site. This proof of concept exploit demonstrates the vulnerabl...

📄 WordPress Charitable 1.7.0.12 Unauthenticated Privilege Escalation

WordPress Charitable plugin version 1.7.0.12 contains an unauthenticated privilege escalation to administrator vulnerability. A remote attacker can elevate privileges to the administrator role and take control of the affected site. This proof of concept exploit demonstrates the vulnerable request...

📄 WordPress CE21 Suite 2.3.1 Unauthenticated SSO API Settings Overwrite

WordPress CE21 Suite plugin version 2.3.1 contains an unauthenticated SSO api settings overwrite vulnerability through missing authorization. A remote attacker can overwrite SSO API configuration without authorization. This proof of concept exploit demonstrates the vulnerable request flow against...

📄 WordPress Masteriyo LMS 1.7.1 Privilege Escalation

WordPress Masteriyo LMS learning-management-system plugin version 1.7.1 contains an authenticated Student+ privilege escalation to administrator vulnerability. A remote attacker can elevate privileges to the administrator role and take control of the affected site. This proof of concept exploit...