457395 matches found
Amazon Linux 2 : apache-ivy (ALAS-2026-3993)
The version of apache-ivy installed on the remote host is prior to 2.3.0-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3993 advisory. The PackagerResolver of Apache Ivy is able to download onlineartifacts and to repackage them in a format defined by apackager.xm...
TencentOS Server 4: crash (TSSA-2026:1082)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1082 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
EulerOS 2.0 SP13 : perl-Archive-Tar (EulerOS-SA-2026-4082)
According to the versions of the perl-Archive-Tar packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory...
TencentOS Server 3: postgresql:15 (TSSA-2026:1112)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1112 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
Amazon Linux 2023 : python3-bson, python3-pymongo, python3-pymongo-gridfs (ALAS2023-2026-3155)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3155 advisory. A flaw was found in pymongo. An integer overflow exists in the bundled native extension for Binary JSON BSON document encoding when processing an unusually large amount of data. An unprivileged attacke...
EulerOS 2.0 SP11 : bison (EulerOS-SA-2026-4305)
According to the versions of the bison packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in GNU Bison affected version not known and classified as critical. Affected by this issue is the function execvp of the...
PT-2026-110725
Name of the Vulnerable Software and Affected Versions Craft CMS versions 4.0.0 through 4.18.6 Craft CMS versions 5.0.0 through 5.10.13 Description Authenticated control panel users with the performUpdates permission or Updates-utility access can execute arbitrary code. The issue occurs because th...
PT-2026-110963
Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite versions 8.10 through 9.2 Description A remote attacker can perform directory traversal on the system. By sending a specially crafted URL request containing "dot dot" sequences /../, an attacker can view arbitrary...
EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2026-4342)
According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap...
ALSA-2026:81613 Important: pcre2 security update
The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl. Security Fixes: pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular...
AlmaLinux 8 : flatpak (ALSA-2026:80687)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:80687 advisory. flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data...
spawn
SPAWN - BOF de Cobalt Strike BOF de Cobalt Strike que crea un proceso sacrificial, lo inyecta con shellcode y ejecuta el payload. Construido para evadir hooks de EDR/UserLand al crear un proceso sacrificial con Arbitrary Code Guard ACG, BlockDll y suplantación de PPID. Debido a ACG, esto no es...
Malicious code in eth-gas-oracle (RubyGems)
Source: amazon-inspector 0f6cd8a676acbc17559b87ede98a030f26837472a482763f1e8a4818da65659d The gem's native extension build script ext/extconf.rb base64-decodes an embedded Ruby payload and executes it via eval inside a double-forked, detached child during gem install. The decoded payload opens a...
CVE-2026-108902 pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link
pH7Builder pH7 Social Dating CMS before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto action that allows authenticated members to delete arbitrary files. Attackers can supply ../ sequences in the POST picturelink parameter to remove other members' photos or...
CVE-2026-108902 pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link
pH7Builder pH7 Social Dating CMS before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto action that allows authenticated members to delete arbitrary files. Attackers can supply ../ sequences in the POST picturelink parameter to remove other members' photos or...
CVE-2026-108902
The pH7Builder (pH7 Social Dating CMS) software before version 18.5.0 is vulnerable to a path traversal vulnerability within the picture module 's deletePhoto() action. An authenticated member can exploit this by supplying ../ sequences in the POST picture_link parameter to delete arbitrary files...
MAL-2026-17786 Malicious code in eth-gas-oracle (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f6cd8a676acbc17559b87ede98a030f26837472a482763f1e8a4818da65659d The gem's native extension build script ext/extconf.rb base64-decodes an embedded Ruby payload and executes it via eval inside a double-forked,...
curl: curl: HTTP/2 upload Use-After-Free
A flaw was found in curl. When curl uploads data over an HTTP/2 connection, it mishandles server stream reset frames, which can lead to the reuse of previously released memory. Under specific memory and timing conditions, a malicious server can exploit this flaw to execute arbitrary code on the...
omae-wa-cheese-da
omae-wa-cheese-da Image L/E física arbitraria de GPU CVE-2025-21479 - filtración de KASLR - SELinux permisivo - servidor root de gancho de inicio seguro de RKP & bypass de DEFEX ejecución de binario personalizado LDPRELOAD Tarda unos 6 minutos.. Ten paciencia. Lo optimizaré después. Dispositivos...
libpng: libpng: Arbitrary code execution due to use-after-free vulnerability
A flaw was found in libpng, a library used for processing PNG Portable Network Graphics image files. This vulnerability arises from improper memory management where a heap-allocated buffer is aliased between internal data structures. When specific functions are called, a freed memory region can...