CVE-2026-115504

A flaw was found in cfitsio. An attacker could exploit this vulnerability by enticing a user or automated system to process a specially crafted Flexible Image Transport System FITS file. Due to improper bounds checking when handling variable-length string columns in the ffgcls2 function, an...

CVE-2026-98730

A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. A local user with access to the Bluetooth Host Controller Interface HCI user channel can inject an oversized transmission packet. Because the driver fails to validate packet length before copying data into a fixed-size memory...

CVE-2025-6218-WinRAR-RCE-POC

CVE-2025-6218: WinRAR Path Traversal RCE ⚠️ CRITICAL VULNERABILITY - Active Exploitation Confirmed CVE-2025-6218 is a critical path traversal vulnerability in WinRAR that allows arbitrary code execution. Currently exploited by APT groups such as GOFFEE, Bitter APT-C-08 and Gamaredon. 📋 Index...

EUVD-2025-211197

An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF...

PT-2026-122188

Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to execute arbitrary code via a crafted model archive. Multi Model Server is end of life and no fixed version is available. Users should discontinue use o...

Linux Distros Unpatched Vulnerability : CVE-2026-97631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - EDK2 contains a vulnerability in BIOS where a user may cause Out-of-bounds Write, Classic Buffer Overflow, and Incorrect Calculation of Buffer Size by remote...

PT-2026-121777

The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not perform any capability check when updating a post through one of its front-end form actions, allowing unauthenticated visitors to overwrite arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2026-115504

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2 in getcols.c that trusts attacker-controlled heap descriptor lengths for...

Ubuntu 24.04 LTS / 26.04 LTS / 26.10 : zlib vulnerability (USN-8954-1)

The remote Ubuntu 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8954-1 advisory. Ali Firas discovered that zlib incorrectly handled certain non-blocking write operations. An attacker could possibly use this issue to trigger...

CVE-2025-45528

An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to achieve arbitrary code execution by processing a crafted PDF file. No specific root cause, remediation details, or exploit links are provided in the documents beyond the sighting of a proof-of-concept. Explo...

EUVD-2026-109095

An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function...

PT-2026-122138

An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function...

CVE-2025-45528

An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF...

SUSE CVE-2026-114125

Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and 11.0.0-alpha.6, a malicious website can interact with the preview of a running Storybook development server. Insufficient iframe embedding and message-origi...

CVE-2022-24818

CVE-2022-24818: Java Deserialization via Unchecked JNDI Lookups in GeoServer and GeoTools The GeoTools library has a number of data sources that can perform unchecked JNDI lookups, which in turn can be used to perform class deserialization and result in arbitrary code execution. As an example thi...

CVE-2026-114608

A flaw was found in Pylint. The application stores module statistics in predictable cache files and deserializes them without adequate validation. A local attacker with write access to a shared or untrusted cache directory can replace these files with malicious data. When Pylint is subsequently...

DEBIAN-CVE-2026-115504

CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2 in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string columns. Attackers can supply a crafted FITS file that overflows a fixed 28,800-byte stack buffer and the caller's string...

CVE-2026-115504

CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2 in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string columns. Attackers can supply a crafted FITS file that overflows a fixed 28,800-byte stack buffer and the caller's string...

CVE-2026-25290

A flaw was found in OOBM. An integer overflow or wraparound vulnerability exists when validating large data buffers from external sources. This flaw occurs due to improper addition used to check buffer length, which can lead to memory corruption. A local attacker could exploit this to achieve...

CVE-2026-114724

A flaw was found in Roundcube Webmail. This flaw allows an attacker capable of modifying stored session data to achieve arbitrary code execution through object injection. The vulnerability occurs because session keys prefixed with an exclamation mark are mishandled during session deserialization,...