211793 matches found
PT-2026-56272
Name of the Vulnerable Software and Affected Versions DBI versions prior to 1.650 Description Code injection is possible via a caller-influenced Profile attribute. When a string is assigned to this attribute, the software splits it into path, package, and arguments, then interpolates the package...
ROS-20260707-73-0030
The vulnerability in Python-Django is related to incorrect verification of the cryptographic signature. Exploiting this vulnerability allows an attacker to execute arbitrary code...
ALSA-2026:36187 Important: perl-HTTP-Daemon security update
The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 servers that listen on a socket for incoming requests. Security Fixes: perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in...
Important: perl-HTTP-Daemon security update
The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 servers that listen on a socket for incoming requests. Security Fixes: perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in...
RHEL 10 : perl-HTTP-Daemon (RHSA-2026:36189)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:36189 advisory. The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 server...
The vulnerability of the DefaultLevelDBSerializer class in the Apache Camel LevelDB Java framework allows a attacker to execute arbitrary code.
The vulnerability of the Camel-LevelDB DefaultLevelDBSerializer class in the Apache Camel LevelDB Java framework is related to deserialization mechanism flaws. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the setOutFilterStartsWith() function in the Camel-Mail component of the Apache Camel Java framework allows a attacker to execute arbitrary code.
The vulnerability of the setOutFilterStartsWith function in the Camel-Mail component of the Apache Camel framework is related to deserialization mechanism flaws. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Important: nginx security, bug fix, and enhancement update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-42055 Bug Fixes...
PT-2026-61023
Name of the Vulnerable Software and Affected Versions FreeRDP affected versions not specified Description FreeRDP contains security issues that could allow an attacker to obtain sensitive information, cause a denial of service by crashing the application, or execute arbitrary code. This includes ...
The vulnerability of the rmapremove() function in the KVM virtualization subsystem of the Linux operating system allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the rmapremove function in the KVM virtualization subsystem of the Linux operating system is related to the use of memory after it is freed, as a result of a pointer that has reached its expiration time. Exploiting this vulnerability can allow an attacker to cause a service...
AlmaLinux 8 : libreoffice (ALSA-2026:35839)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:35839 advisory. libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation CVE-2026-8357 Tenable has extracted the preceding...
Important: perl-HTTP-Daemon security update
The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 servers that listen on a socket for incoming requests. Security Fixes: perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in...
Adobe ColdFusion Path Traversal Vulnerability
Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user...
ALSA-2026:36188 Important: perl-HTTP-Daemon security update
The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 servers that listen on a socket for incoming requests. Security Fixes: perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in...
kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A race condition exists in the SCTPSENDALL path where a cached list entry is not properly revalidated after the socket lock is temporarily released. This allows a local attacker or a remote attacker v...
PYSEC-2026-2139
Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browserconfig.extraargs, which flowed into Chromium's launch arguments. An attacker could inject Chromium switches that replace a child-process launch command together...
Arbitrary Code Injection
Overview langroid is a Harness LLMs with Multi-Agent Programming Affected versions of this package are vulnerable to Arbitrary Code Injection in the eval process used by certain agent components when evaluating external input with fulleval=True. An attacker can execute arbitrary system commands b...
CVE-2026-9080
A flaw was found in libcurl. When curleasypause is called within the event-based CURLMOPTSOCKETFUNCTION callback, a use-after-free vulnerability is triggered. This occurs because libcurl attempts to store a flag using a pointer to memory that has already been freed. An attacker could potentially...
CVE-2026-48316
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed...
