ndsudo Code Execution

The vulnerability of the ndsudo component of the Netdata monitoring software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2026-78799: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in Quanxun Huiju Network Technology Beijing Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: = iKuai83.7.23Enterprise Build 202606021825 - Free Edition: = iKuai 84.0.304-beta allows a remote attacker to execute arbitrary code...

PT-2026-111354

Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute arbitrary code on the server via a crafted theme. This issue is fixed in version 6.64.0...

CVE-2026-103835: Out-of-bounds Write

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-104340: Heap-based Buffer Overflow

Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-58772: Buffer Copy without Checking Size of Input

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability...

PT-2026-116204

Уязвимость системы аппаратной виртуализации Hyper-V операционных систем Windows связана с использованием памяти после ее освобождения. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...

APSB26-158 : Security update available for Adobe Photoshop

Adobe has released a priority 3 security update for Adobe Photoshop. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution and application denial-of-service. Adobe is not aware of any exploits in the wild for any of the issues addressed in this...

APSB26-171 : Security update available for Adobe Dimension

Adobe has released a priority 3 security update for Adobe Dimension. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution, application denial-of-service, and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues...

APSB26-152 : Security update available for Adobe Experience Manager

Adobe has released a priority 2 security update for Adobe Experience Manager. This update addresses vulnerabilities rated critical and medium that could result in arbitrary code execution, security feature bypass, and privilege escalation. Adobe is not aware of any exploits in the wild for any of...

CVE-2026-104342: Use After Free

Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-103821: Out-of-bounds Write

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Siemens RUGGEDCOM CROSSBOW Station Access Controller

SUMMARY RUGGEDCOM CROSSBOW Station Access Controller SAC contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM...

APSB26-172 : Security update available for Adobe FrameMaker

Adobe has released a priority 3 security update for Adobe FrameMaker. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution, application denial-of-service, and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues...

APSB26-167 : Security update available for Adobe Bridge

Adobe has released a priority 3 security update for Adobe Bridge. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...

APSB26-144 : Security update available for Adobe ColdFusion

Adobe has released a priority 2 security update for Adobe ColdFusion. This update addresses vulnerabilities rated critical and high that could result in arbitrary code execution, security feature bypass, arbitrary file system write, privilege escalation, arbitrary file system read, application...

CVE-2026-95639: Incorrect Authorization

Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim...

PT-2026-113276

🚨 CVE-2026-103834 Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 🎖@cveNotify...

CVE-2026-106612: Incorrect Authorization

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Engrampa vulnerability (USN-8640-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8640-1 advisory. It was discovered that Engrampa incorrectly handled symbolic links when extracting certain archives. An attacker could possibly use this...