CVE-2026-92744

The Delinea Privilege Manager agent is vulnerable to a remote code execution (RCE) flaw. Under certain conditions, an unauthenticated remote attacker can exploit this vulnerability to execute arbitrary code with LocalSystem privileges. The vulnerability is associated with CWE-306 (Missing Authent...

CVE-2026-92744 Delinea Privilege Manager agent unauthenticated remote code execution vulnerability

Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem...

CVE-2026-92744 Delinea Privilege Manager agent unauthenticated remote code execution vulnerability

Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem...

CVE-2023-22793

A vulnerability allowing an unauthenticated attacker to perform remote code execution RCE on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center...

CVE-2026-107238

A vulnerability in the Veeam Management Pack for Microsoft System Center Collector service allows an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account . This flaw was identified during internal testing and impacts Veeam Management Pack for Microsoft Syste...

CVE-2026-107238

A vulnerability allowing an authenticated domain user to perform remote code execution RCE as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service...

CVE-2026-107239

The Veeam Management Pack for Microsoft System Center Collector service is vulnerable to Remote Code Execution (RCE) (CVE-2026-107239). This flaw allows a member of the Veeam Virtualization Extensions Users group to execute arbitrary code on affected servers. The vulnerability was discovered duri...

CVE-2023-22793

The Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center is vulnerable to a Critical remote code execution (RCE) flaw (CVE-2023-22793 ). This vulnerability allows an unauthenticated attacker to execute arbitrary code on affected servers. The flaw was discov...

CVE-2026-107239

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution RCE on servers running the Veeam Management Pack for Microsoft System Center Collector service...

CVE-2026-61645

Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the Upload API arises because the API does not validate the uploaded file path or type. An attacker can overwrite sensitive configuration files or place malicious...

WordPress 7.1.4 Patches Unauthenticated Upgrade-Window RCE; Exploitation Attempts Detected After Release

TL;DR: WordPress 7.1.4 was released on October 28, 2026. According to WordPress, it includes fixes for 22 security vulnerabilities. The most serious is an unauthenticated race condition in the Core update process that can lead to remote code execution. Threat actors are already actively attemptin...

pillow: pillow: Arbitrary code execution via JPEG encoder buffer overflow

A flaw was found in Pillow. A remote attacker could exploit a heap buffer overflow vulnerability to achieve arbitrary code execution or cause a Denial of Service DoS. This issue occurs when an application re-encodes an untrusted image into JPEG format while preserving specially crafted color...

django: Django: Remote code execution via GeoDjango spatial lookups

A flaw was found in Django. GeoDjango's spatial lookups can be exploited by a staff user with view permissions who submits a specially crafted spatial-field filter. This vulnerability allows an attacker to write arbitrary files to the server, which can lead to remote code execution. Additionally,...

Critical: Red Hat Security Advisory: Satellite 6.19 security update

A security update for Red Hat Satellite is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links ...

GitPython: GitPython: Arbitrary code execution via unsafe URL protocol handling

A flaw was found in GitPython. A remote attacker can achieve arbitrary code execution by supplying specially crafted repository URLs that are processed without proper protocol validation. Because the library forwards untrusted URLs and input parameters to the underlying Git utility without adequa...

CVE-2021-31166

CVE-2021-31166: HTTP Protocol Stack Remote Code Execution Vulnerability This is a proof of concept for CVE-2021-31166 "HTTP Protocol Stack Remote Code Execution Vulnerability", a use-after-free dereference in http.sys patched by Microsoft in May 2021. According to this tweet the vulnerability has...

CVE-2026-61645 Docat has Arbitrary File Upload exists in Upload API

Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the Upload API arises because the API does not validate the uploaded file path or type. An attacker can overwrite sensitive configuration files or place malicious...

CVE-2026-61645

The Docat documentation hosting tool contains an arbitrary file upload vulnerability in its Upload API. The root cause is a lack of validation for the uploaded file path or type . An attacker can exploit this to overwrite sensitive configuration files or deposit malicious files on the web server....

CVE-2026-61645 Docat has Arbitrary File Upload exists in Upload API

Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the Upload API arises because the API does not validate the uploaded file path or type. An attacker can overwrite sensitive configuration files or place malicious...

CVE-2026-61645 Docat has Arbitrary File Upload exists in Upload API

Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the Upload API arises because the API does not validate the uploaded file path or type. An attacker can overwrite sensitive configuration files or place malicious...