RHEL 8 : libxml2 (RHSA-2026:93473)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93473 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Stack Buffer...

RHEL 8 : pki-core:10.6 (RHSA-2026:93668)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:93668 advisory. The Public Key Infrastructure PKI Core contains fundamental packages required by Red Hat Certificate System. Security Fixes: pki-core: Dogtag/PKI:...

bind security, bug fix, and enhancement update

32:9.11.36-18 - CVE-2026-94300 bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay 32:9.11.36-17 - CVE-2026-19630 bind: BIND: Denial of Service via unbounded processing of crafted DNS messages processing of crafted DNS messages 32:9.11.36-16.17 - Backport additional checks for th...

bind9.16 security update

32:9.16.23-0.22.21 - CVE-2026-94300 bind9.16: bind: Arbitrary code execution via GSS-TSIG UDP message replay 32:9.16.23-0.22.20 - CVE-2026-97313 bind9.16: bind: Denial of service via assertion failure in RPZ query processing 32:9.16.23-0.22.19 - CVE-2026-96888 bind9.16: bind: Denial of Service vi...

Google Chrome Code Execution

The Accessibility component vulnerability in Google Chrome is related to a buffer overflow in memory. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code via a specially crafted HTML page...

GFX Component Code Execution

The vulnerability in the GFX component of Google Chrome and Microsoft Edge is related to memory usage after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code via a specially crafted HTML page...

GeoDjango Spatial Search Code Execution

The spatial search vulnerability in the GeoDjango software platform for Django web applications is related to improper external handling of filenames or file paths. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

Incus Container Management System Code Execution

The vulnerability in the Incus container management system and virtual machine manager is related to an incorrect file access reference. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

D-Link DIR-505 Wireless Router Code Execution

The vulnerability in the main function of the /secmark1524.cgi script within the Web Management CGI interface of the D-Link DIR-505 wireless router software is related to the presence of undocumented configuration commands. Exploitation of this vulnerability may allow a remote attacker to execute...

Payments component Code Execution

The vulnerability in the Payments component of Google Chrome and Microsoft Edge is related to use-after-free memory usage. Exploiting this vulnerability allows a remote attacker to execute arbitrary code via a specially crafted HTML page...

CVE-2026-49934: Google Android: In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input…

In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

Security Advisory 0203

Security Advisory 0203 PDF Date: November 2, 2026 Revision | Date | Changes ---|---|--- 1.0 | November 2, 2026 | Initial release 1.1 | November 3, 2026 | Remove Wifi-AP from affected products to unaffected products. Move additional products from under triage to unaffected products. The CVE-ID...

PT-2026-135262

LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vulnerability that allows authenticated users to write arbitrary files by supplying unsanitized file names to writeTempFile. Attackers can create a file record via file.createFile with a traversal name, then trigger document parsin...

PT-2026-135815

A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker who can supply arguments to the affected scripts could exploit this issue to trigger unintended command substitution, executing...

Node.js 24.22.0 Brotli Decoder Remote Code Execution

Node.js version 24.22.0 contains an out-of-bounds write in the Brotli decoder. A proof of concept demonstrates remote code execution through a crafted Brotli-compressed HTTP request. https://packetstorm.news/download/238892...

CVE-2026-16306: INFINITT Healthcare System Manager: Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd

Remote Code Execution in the IModular.exe URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote unauthenticated attacker to invoke unintended application functionality and potentially execute arbitrary code via a crafted imodular:// URI containing attacker-controlled command...

CVE-2026-91908: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature…

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution...

PT-2026-135449

Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in the picttoppm paintPoly function due to an unbounded polygon point count. Attackers can supply a crafted PICT file with a polygon exceeding 100 points to overwrite the fixed pts array...

PT-2026-135809

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Certificate Validation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Denial of Service...

CVE-2026-91894: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege, Arbitrary Code Execution and Denial of Service...