655963 matches found
Important: bind9.16 security update
The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...
Important: libXi security update
X.Org X11 libXi runtime library Security Fixes: libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply CVE-2026-109090 libXi: libXi: Arbitrary code execution via DEVICERESOLUTION heap-based buffer overflow CVE-2026-109089 For more details about the security issues, including the...
Important: libXi security update
X.Org X11 libXi runtime library Security Fixes: libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply CVE-2026-109090 libXi: libXi: Arbitrary code execution via DEVICERESOLUTION heap-based buffer overflow CVE-2026-109089 For more details about the security issues, including the...
PT-2026-135547
Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering Workbench VEW could allow a remote authenticated third party to run arbitrary code with the permissions of the publishing Lambda's IAM role. This could allow access to...
CVE-2026-73695: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in…
Control Web Panel CWP before webpanelversion 1.16 contains a path traversal vulnerability in services/users/index.php that allows attackers to include arbitrary local PHP files by supplying an unsanitized module name parameter concatenated directly into an include path. Attackers can inject...
PT-2026-135454
QuickJS-NG before 0.16.0 contains an integer overflow in js proxy get own property names in quickjs.c that causes a heap buffer overflow on 32-bit hosts. Attackers running JavaScript can return a large array-like object from a Proxy ownKeys trap to wrap the allocation size, causing crashes or...
CVE-2026-8923: Zohocorp: Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated…
Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated Remote Code Execution in Log Forward option...
CVE-2026-77876: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the…
Control Web Panel CWP before webpanelversion 1.16 contains an OS command injection vulnerability in the protecteddirectory user panel module that allows attackers to execute arbitrary commands by submitting unescaped input through the file POST parameter in the acc=deletedp action. Attackers can...
Google Chrome Microsoft Edge Code Execution
The vulnerability in the Views component of Google Chrome and Microsoft Edge is related to use-after-free memory allocation. Exploitation of this vulnerability enables a remote attacker to execute arbitrary code via a specially crafted HTML page...
Apache OpenOffice Code Execution
The vulnerability in the Apache OpenOffice office suite package is related to the use of an untrusted search path. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...
Google Chrome Microsoft Edge Code Execution
The vulnerability in the Compositing component of Google Chrome and Microsoft Edge is related to use-after-free memory allocation. Exploitation of this vulnerability enables a remote attacker to execute arbitrary code via a specially crafted HTML page...
Black Python Code Formatter Code Execution
The vulnerability in the Black Python code formatting tool is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...
ksmbd module Code Execution
The vulnerability in the ksmbd module of the SMB server implementation in Linux kernel is related to race conditions. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...
LibreOffice Code Execution
The vulnerability in the LibreOffice office suite package is related to the inclusion of functions from an untrusted controlled area. Exploitation of this vulnerability could allow an attacker to execute arbitrary code...
Google Chrome Microsoft Edge Code Execution
The vulnerability in the Bluetooth components of Google Chrome and Microsoft Edge is related to use-after-free memory allocation. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code via a malicious peripheral device...
bind security update
9.16.23-40.0.1.el98.13 - Fix warning when changing device file permissions Orabug: 36518580 32:9.16.23-40.13 - Fix CVE-2026-94300: Arbitrary code execution via GSS-TSIG UDP message replay. - Fix CVE-2026-97313: Denial of Service via assertion failure in RPZ query processing. - Fix CVE-2026-96888:...
LMCache 0.5.5 Multiprocess Transport Remote Code Execution
LMCache versions 0.3.9 through 0.5.5 contain an unauthenticated pickle deserialization flaw in the multiprocess ZeroMQ transport that allows remote code execution. https://packetstorm.news/download/238913...
Gitea 1.27.0 Diffpatch Git Hook Remote Code Execution
Gitea versions 1.17.0 through 1.27.0 contain a diffpatch API flaw that enables repository writers to install and execute a Git hook as the service account. This proof of concept demonstrates the issue. https://packetstorm.news/download/238912...
ALSA-2026:94011 Important: bind9.16 security update
The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...
Grav CMS 1.10.7 Unauthenticated Remote Code Execution
Grav CMS version 1.10.7 and earlier contain an unauthenticated arbitrary YAML write issue in the Admin component that can create a scheduled task and execute arbitrary PHP code. This proof of concept demonstrates remote code execution. https://packetstorm.news/download/238922...