Google Chrome Vulnerability: CVE-2026-118312

Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Google Chrome Vulnerability: CVE-2026-118356

Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Oracle E-Business Suite 12.2.15 SQL Injection

Oracle E-Business Suite versions 12.2.3 through 12.2.15 contain an unauthenticated Thin Client Framework SQL injection issue that can lead to remote code execution. The supplied Nuclei template checks the affected AppsTCFServer handshake and proxy creation response...

Vulnerabilities Resolved in Veeam Backup for Microsoft 365 8.6

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

Cisco Expressway Series X15.5.3 Remote Code Execution

Cisco Expressway Series versions X15.5.3 and earlier configured in a cluster contain a remote code execution vulnerability due to persistent cookies and insufficient client certificate validation. The supplied offline tool assesses saved inventory and CLI evidence...

Microsoft Edge (Chromium-based): CVE-2026-85898: Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

Microsoft Edge (Chromium-based): CVE-2026-83831: Remote Code Execution Vulnerability

Double free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

PT-2026-127234

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

Security Update for Microsoft .NET Core (October OOB 2026)

The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. CVE-2026-70197 -...

Security Update for Microsoft ASP.NET Core (October OOB 2026)

The Microsoft ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute...

Security Update for Microsoft .NET Core SDK (October OOB 2026)

The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. CVE-2026-70197 -...

ROS-20261027-73-0043

The vulnerability in rabbitmq-server is related to improper handling of web page structures. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

PT-2026-125554

Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process...

PHP CGI SAPI Pointer Underflow Remote Code Execution

PHP versions 5.x through 8.4.26 are reported to contain a pointer underflow vulnerability in the CGI SAPI when cgi.fixpathinfo is enabled. A missing bounds check during PATHINFO processing can result in out-of-bounds memory access, potentially allowing heap information disclosure, an ASLR bypass,...

PT-2026-127253

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject malicious PHP through LDAP connector configuration parameters such as ldap filter, poisoning /personnalisation/config ldap.inc.php and permitting remote code...

PT-2026-126679

Name of the Vulnerable Software and Affected Versions EPICS Base versions prior to 7.0.11 Description An integer overflow occurs during network request processing, leading to memory allocation with an incorrect size. This flaw allows the handling of attacker-supplied data to cause memory...

PT-2026-126615

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution RCE via UPnP root description parsing...

REDCap 17.4.3 Survey Passthru Data Import RCE Checker

REDCap versions 13.3.0 through affected pre-fixed branches contain a survey passthru and Data Import path/stream handling issue that may allow remote code execution. This tool fingerprints targets, validates public survey hashes, and probes passthru routes...

PT-2026-127243

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

Google Chrome Vulnerability: CVE-2026-118351

Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...