PT-2026-96739

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Speech affected versions not specified Description Malicious input created by an attacker could cause a code injection. This issue may lead to arbitrary code execution, information disclosure, and data tampering. Recommendations At...

PT-2026-96914

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could result in arbitrary code execution within the context of the current user. This flaw is...

PT-2026-96895

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could lead to arbitrary code execution within the context of the current user. This flaw ca...

SUSE CVE-2026-88807

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...

Arbitrary Code Injection

Overview stata-mcp is a Let LLM help you achieve your regression analysis with Stata Affected versions of this package are vulnerable to Arbitrary Code Injection via the adopackageinstall process. An attacker can execute arbitrary operating system commands by supplying specially crafted input...

CVE-2026-88807

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...

AZL-103391 CVE-2026-88807 affecting package libXrender 0.9.11-1

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...

DEBIAN-CVE-2026-88807

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...

CVE-2026-88807

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...

UBUNTU-CVE-2026-88807

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...

CVE-2026-88807 libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...

CVE-2026-88807

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...

CVE-2026-88807

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...

CVE-2026-88807

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...

CVE-2026-88807 libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...

EUVD-2026-83916

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...

vim: Vim: Arbitrary code execution via crafted step-definition patterns

A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition...

CVE-2026-94103

A vulnerability has been found in RooCMS up to 1.2.2/1.3.4/1.4RC2. This impacts the function eval of the file roocms/sitepagePHP.php of the component Frontend Rendering. Such manipulation of the argument content leads to code injection. The attack can be launched remotely. The exploit has been...

CVE-2026-94103

RooCMS (up to versions 1.2.2 , 1.3.4 , and 1.4RC2 ) is affected by a code injection vulnerability in the eval function within roocms/site_pagePHP.php (Frontend Rendering component). Manipulation of the content argument allows an authenticated remote attacker to inject arbitrary code. The CVSS 3.1...

EUVD-2026-83815

A vulnerability has been found in RooCMS up to 1.2.2/1.3.4/1.4RC2. This impacts the function eval of the file roocms/sitepagePHP.php of the component Frontend Rendering. Such manipulation of the argument content leads to code injection. The attack can be launched remotely. The exploit has been...