EulerOS 2.0 SP15 : gzip (EulerOS-SA-2026-3979)

According to the versions of the gzip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the...

Debian dla-4829 : rails - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4829 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4829-1 [email protected]...

PT-2026-108142

Name of the Vulnerable Software and Affected Versions Amazon Agent Plugins for AWS databases-on-aws versions prior to 1.7.1 Description An incomplete list of disallowed inputs allows a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper. This...

PT-2026-107796

An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file pa...

EulerOS 2.0 SP15 : python-setuptools (EulerOS-SA-2026-3944)

According to the versions of the python-setuptools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal...

EulerOS 2.0 SP15 : containerd (EulerOS-SA-2026-3902)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...

Rocky Linux 8 [CIQ] Security Update: libpcap / libpcap-debuginfo / libpcap-debugsource / libpcap-devel (crlsa-2026_76045)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202676045 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description block...

PT-2026-107856

A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion...

ProFTPD Improper Access Control Vulnerability

ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...

PT-2026-108285

A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...

PT-2026-107787

The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website via a crafted Intent...

Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access. Vulnerability Details CVEID:CVE-2026-78401 DESCRIPTION: IBM Verify Identity Access could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the...

Security Bulletin: Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Summary Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Ra...

CVE-2024-42009

CVE-2024-42009 – Roundcube 保存型XSS Docker PoC 📌 概要 このリポジトリは、Roundcube Webmail の CVE-2024-42009 （保存型クロスサイトスクリプティング（XSS）の脆弱性）に対する実証コード（PoC）を示しています。 この脆弱性は、不適切なHTMLサニタイズとその後の安全でない属性の再処理に起因し、攻撃者が細工したHTMLメールを介して悪意のあるイベントハンドラを注入することを可能にします。 ⚠️ 影響を受けるバージョン Roundcube ≤ 1.5.7 Roundcube ≤ 1.6.7 🧠 脆弱性の概要...

CVE-2026-105816

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...

CVE-2026-67401

CVE-2026-67401 — cPanel/WHM EmailTrack SQLインジェクション → root RCE CVE-2026-67401 の概念実証です。これは cPanel & WHM の EmailTrack 機能における重大な SQL インジェクション脆弱性であり、メール関連の権限を持つ認証済みユーザーが任意のファイルを書き込み、root としてコードを実行できるようにします。 発見者: Ali Mustafa 公開日: 2026年9月8日 コンポーネント: EmailTrack メール配信ログ / トラッキング 影響を受けるバージョン 修正ビルド 未満...

CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – LangGraph SQLite Checkpoint SQLインジェクション CVE-2025-67644 は、langgraph-checkpoint-sqlite パッケージ（LangGraph / LangChain エコシステムの一部）における SQLインジェクション 脆弱性（CWE-89）です。 攻撃者は、SqliteSaver の list / alist メソッドに渡されるサニタイズされていない メタデータフィルターキー を介して、任意の SQL を注入できます。 影響 :...

CVE-2026-105816

Vault and Vault Enterprise are vulnerable to arbitrary code execution on the host because the software does not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. If Vault utilizes Shamir seals and an external plugin directory , a pri...

CVE-2026-105816 Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...

Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Summary Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Ra...