CVE-2026-18199

Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability...

CVE-2026-57200

A flaw was found in Asterisk. This vulnerability allows an authenticated remote attacker with read-only permissions to achieve arbitrary code execution by bypassing authorization controls. Under conditions where the HTTP service is enabled and accessible, an attacker can submit unauthorized write...

CVE-2026-57198

A flaw was found in Asterisk. In deployments where the chansip channel driver has text support enabled, an authenticated attacker can send specially crafted network packets to trigger a heap-based buffer overflow in the T.140 Redundant Data RED handling mechanism. This vulnerability could allow t...

CVE-2026-57197

A flaw was found in Asterisk. A heap buffer overflow in the formatoggspeex module allows an attacker to cause a Denial of Service DoS or potentially achieve arbitrary code execution. This issue occurs when Asterisk reads a corrupted Speex audio file, triggering an unbounded memory copy operation...

CVE-2026-57189

A flaw was found in Asterisk. In configurations where the chansip channel driver has text support enabled, an authenticated remote attacker can send specially crafted packets during real-time text processing to trigger an out-of-bounds memory write. This vulnerability may allow the attacker to...

EUVD-2026-115106

Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability...

CVE-2026-18199

Zohocorp ManageEngine Password Manager Pro (versions before 13236 ) and PAM360 (versions before 8601 ) are vulnerable to an authenticated Remote Code Execution (RCE) vulnerability. The underlying cause is identified as CWE-78 , which involves the improper neutralization of special elements used i...

CVE-2026-18199 Remote Code Execution Vulnerability

Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability...

CVE-2026-18199 Remote Code Execution Vulnerability

Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability...

CVE-2026-119977

A flaw was found in WordPress. During core package upgrades, temporary files are placed into predictable, web-accessible staging directories. An unauthenticated remote attacker could exploit this condition during an upgrade window to access these staging paths and achieve arbitrary code execution...

[SECURITY] [DLA 4878-1] chromium security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4878-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort November 02, 2026 https://wiki.debian.org/LTS -...

Exploit for CVE-2026-14900

CVE-2026-14900: Unauthenticated RCE in Cost Calculator Builder...

curl: Re-entrant curl_easy_pause UAF in cw-pause

Summary This report is a bypass of the prior fix for the nested curleasypause re-entrancy issue described in HackerOne report 4102061. The original patch guarded the writer path in lib/cw-out.c by adding a re-entrancy guard around cwoutflushchain, but it did not guard the sibling writer...

FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure

A flaw was found in FreeRDP. An uninitialized heap memory disclosure vulnerability exists in the urbdrc USB redirection channel. A malicious Remote Desktop Protocol RDP server can exploit this by inducing failing USB transfers, allowing it to read uninitialized heap memory from the client. This...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit a heap-based buffer overflow vulnerability in the negosendnegotiationrequest function. By sending a specially crafted Server Redirection PDU message with an attacker-controlled LoadBalanceInfo field, the serve...

pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build

A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...

Important: Red Hat Security Advisory: postgresql:16 security update

An update for the postgresql:16 module is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

brotli: Out-of-Bounds Write in Google Brotli Decoder

A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or...

Important: Red Hat Security Advisory: nginx security update

An update for nginx is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...