Node.js 26.x Brotli Decoder Remote Code Execution Mitigation

Terraform configuration and a verification script provide an interim Azure Application Gateway WAFv2 mitigation for Node.js versions 22.x, 24.x, and 26.x affected by a Brotli decoder out-of-bounds write that can permit remote code execution...

PT-2026-122139

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

GitLab 19.5.0 Integer Overflow Remote Code Execution

GitLab CE/EE versions 7.0 through 19.5.0 contain an integer overflow in the regular expression compiler that may allow unauthenticated remote code execution. This proof of concept triggers the issue through a crafted org file rendered by the blob viewer. https://packetstorm.news/download/237263...

UBUNTU-CVE-2026-92183

GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Executi...

ROS-20261023-73-0211

The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-106765

The @rog0x/mcp-docker-tools version 1.0.1 contains a vulnerability that allows a remote attacker to perform arbitrary code execution . The flaw is specifically located within the handleImageList function. No details regarding the specific root cause, remediation, or active exploits are provided i...

ROS-20261023-73-0135

The vulnerability in rabbitmq-server relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2026-106765

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

EUVD-2026-109094

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

ROS-20261023-73-0030

The vulnerability in Jenkins is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0219

The vulnerability in Jenkins is related to errors in handling HTTP requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0093

The vulnerability of the scalenearestneighbor function in the libheif file format decoder/coder is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

ROS-20261023-73-0038

The vulnerability in Jenkins is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0022

The vulnerability in libssh2 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-122127

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.03 to before version 26.05, ExternalFilesDownloader.getFilename extracts the destination filename from a server-supplied Content-Disposition response header and passes it directl...

ROS-20261023-73-0153

The vulnerability in Jenkins is related to insufficient verification of the registry. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Tenable Security Center Multiple Vulnerabilities (TNS-2026-28)

According to its self-reported version, the Tenable Security Center running on the remote host is 6.9.1 or earlier and missing security patch SC-202610.1. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-28 advisory. - PHP uses longjmp for out-of-memory OOM...

CVE-2026-106764

An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function...

RockyLinux 9 : .NET 10.0 (RLSA-2026:86193)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:86193 advisory. dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability CVE-2026-102870 dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service...

Alibaba Cloud Linux 3 : 0318: php (ALINUX3-SA-2026:0318)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0318 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-1218: The mysqlnd wire protocol...