PT-2026-120223

Dulwich from 0.23.1 before 1.2.8 contains a path traversal vulnerability in CommitFilter. apply index filter that allows attackers to write files outside the working directory via symlinks persisting between commits. Attackers can craft a repository where an ancestor commit's symlink redirects a...

PT-2026-120171

FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparound in rdpsnd server select format DVI ADPCM block-alignment arithmetic bypasses validation. A malicious RDP client can send two SNDC FORMATS PDUs with an nBlockAlign too small...

Oracle PeopleSoft PeopleTools 8.62 RCE Scanner

This script scans Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 PSEMHUB endpoints for exposure indicators associated with unauthenticated remote code execution...

PT-2026-120246

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility...

PT-2026-120247

Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility...

PT-2026-120235

uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted console scripts or gui scripts entry point names. Attackers who induce users to install a malicious wheel can place executables in PATH directories,...

PT-2026-120237

sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability CVE-2026-96889 that, under certain runtime-specific conditions, can lead to code execution on glibc-based Linux. An attacker can supply a crafted SVG image that, when decoded by sharp through librsvg, may...

PHP PHP2Shell Vulnerability Check

PHP versions 5.4 and later may be affected by the PHP2Shell remote code execution vulnerabilities. This tool inventories PHP installations, checks version and network exposure, and reports possible compromise indicators...

PT-2026-120222

Dulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in porcelain.checkoutpaths=... that allows attackers to write arbitrary files by abusing raw os.open without O NOFOLLOW. Attackers can craft a repository where a worktree symlink points to .git/hooks/post-checkout, so...

PT-2026-120224

Dulwich from 0.22.5 before 1.2.8 contains a path traversal vulnerability in stash.py pop that allows attackers to write arbitrary files outside the worktree through intermediate directory symlinks. Attackers can craft a malicious repository whose popped stash writes a payload into...

PHP CGI SAPI 8.4.26 Pointer Underflow Remote Code Execution

PHP CGI SAPI versions 5.x through 8.4.26 reportedly contain a pointer underflow vulnerability in sapi/cgi/cgimain.c when cgi.fixpathinfo=1 is enabled. Manipulating PATHINFO with URL-encoded newline characters can trigger out-of-bounds pointer arithmetic, resulting in heap corruption and potential...

PT-2026-120220

Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a malicious repository with a tree entry named 'C:' that bypasses NTFS validation and writes files outside the worktree to achieve remote code...

PT-2026-120185

ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allows authenticated users, including read-only reader role holders, to execute Groovy code because GremlinQueryEngine.command lacks scripting authorization checks. Attackers can submit Gremlin commands to the POST...

libsvg Heap Buffer Overflow DoS

The vulnerability of the SVG vector graphics rendering library, librsvg, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

PT-2026-120762

The quiet one in the Node.js batch is CVE-2026-106074. If you ship a single executable app or use a startup snapshot, the random caches behind crypto.randomUUID and randomInt got baked into the build, so every process hands out the same values. Upgrading Node on the server doesn't undo that...

ALSA-2026:86907 Important: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests...

Important: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests...

SUSE SLED15 / SLES15 Security Update : fetchmail (SUSE-SU-2026:4604-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4604-1 advisory. This update for fetchmail fixes the following issue: - CVE-2026-94184: stack-based buffer overflow in NTLM authenticati...

PT-2026-120823

Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode in src/libImaging/JpegEncode.c can call jpeg write marker for a JPEG COM comment when an ICC profile has exactly filled the 65536-byte encoder buffer. libjpeg writes one byte before checking the exhausted free in buffe...

PT-2026-120659

Lagoon is an application delivery platform for Kubernetes. Versions prior to 2.33.1 have a vulnerability in the ssh service in Lagoon core that would allow an attacker to execute arbitrary code which could lead to, among other things, elevated administrative permissions. It is mitigated by the fa...