ROS-20261023-73-0223

The vulnerability in Jenkins is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0225

The vulnerability in Jenkins is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

rog0x mcp-git-tools security vulnerability

A security vulnerability exists in version 1.0.1 of rog0x mcp-git-tools; it stems from issues in the resolveBaseBranch function and may allow remote attackers to execute arbitrary code...

PHP 8.4.26 Remote Code Execution

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain an out-of-memory state-corruption vulnerability that may allow remote code execution. This proof of concept targets PHP 8.4.26 Apache modphp in an isolated Docker environment. https://packetstorm.news/download/237271...

PHP 8.4.26 Stale Session Global State Remote Code Execution

PHP version 8.4.26 contains a stale session global state use-after-free that can lead to remote code execution. Included proof of concept uses session upload progress in a local Docker Compose lab. https://packetstorm.news/download/237277...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-devel / etc (CENTOS7:CLSA-2026:1790603589)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1790603589 advisory. - GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu...

ROS-20261023-73-0097

The vulnerability in libxml2 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-106765

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

rog0x mcp-git-tools security vulnerability

A security vulnerability exists in version 1.0.1 of rog0x mcp-git-tools; it stems from issues in the handleImageList function and may allow remote attackers to execute arbitrary code...

Vulnerability related to CGM CLININET permission, authorization, and access control issues

CGM CLININET versions 2026.MS3 and earlier contain a vulnerability related to permission escalation and access control. This issue arises because multiple processes responsible for HL7 communication with external systems run as root when processing untrusted data. Compromised attackers on adjacen...

Linux Distros Unpatched Vulnerability : CVE-2026-106547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow in H5VMarrayfill in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrar...

MiracleLinux 8 : dotnet8.0-8.0.132-2.el8_10.ML.1 (AXSA:2026-2120:20)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2120:20 advisory. dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability CVE-2026-58280 dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET...

AlmaLinux 9.2 [TuxCare] Security Update: grafana Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792757203)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792757203 advisory. - Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive...

Linux Distros Unpatched Vulnerability : CVE-2026-114094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a...

Brotli Node.js Code Execution

The Brotli data compression algorithm vulnerability in the Node.js software platform is related to a lack of validation on return values. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

ROS-20261023-73-0030

The vulnerability in Jenkins is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-106764

An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function...

PHP 8.4.26 Remote Code Execution

PHP version 8.4.26 contains out-of-memory and stale-state memory-corruption vulnerabilities that can lead to remote code execution under a vulnerable Apache modphp prefork configuration. This proof of concept demonstrates the PHP2Shell exploit chain. https://packetstorm.news/download/237284...

PHP 8.4.26 mod_php Remote Code Execution

PHP version 8.4.26 with modphp contains an out-of-memory handling vulnerability that allows unauthenticated remote command execution. The included proof of concept targets the PHP session upload-progress feature. https://packetstorm.news/download/237269...

PHP 8.4.26 session.upload_progress Remote Code Execution

PHP version 8.4.26 under Apache modphp contains a pre-authentication remote code execution vulnerability in session upload progress handling. This proof of concept chains memory disclosure and stale session state to execute commands as the web worker. https://packetstorm.news/download/237267...