CVE-2026-104067

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify bitmap and transparency mask dimensions match. Attackers can supply a crafted SVM file with mismatched mask dimensions to trigger heap reads and writes,...

EUVD-2026-115640

PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JMsetannotcalloutline that copies a caller-supplied number of callout points into a fixed three-element stack array. Attackers who control the callout argument passed to Page.addfreetextannot can supply four or more...

EUVD-2026-115642

The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, = 260927 via the 'itemname' parameter parameter. This is due to insufficient sanitization in stripphptagsdeep, which only strips literal '?' sequences, combined with a post-interpolation...

Malicious code in pyprig (PyPI)

Source: kam193 11f4beddcb42e2348d31d2ef0605d72198a28e796467c8afbac5c5c30d870315 Clone of a legitimate Pydantic package with the added downloading of a remote code. The remote code is delivered from the GitHub repository and unpacked as a new module and then called during initialization of any...

CVE-2026-120833 labbench before 0.46.1 Deserialization of Untrusted Data via read() Pickle Auto-Dispatch

labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read and readrelational that passes any file with a .p or .pickle extension to pandas.readpickle based on the extension alone. Attackers who supply a crafted data file or relational data archive can execute...

EUVD-2026-115652

labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read and readrelational that passes any file with a .p or .pickle extension to pandas.readpickle based on the extension alone. Attackers who supply a crafted data file or relational data archive can execute...

CVE-2026-120833 labbench before 0.46.1 Deserialization of Untrusted Data via read() Pickle Auto-Dispatch

labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read and readrelational that passes any file with a .p or .pickle extension to pandas.readpickle based on the extension alone. Attackers who supply a crafted data file or relational data archive can execute...

CVE-2026-120833

The labbench software (versions before 0.46.1 ) is vulnerable to a deserialization of untrusted data vulnerability within the read() and read_relational() functions. The root cause is an auto-dispatch mechanism that passes any file with a .p or .pickle extension to pandas.read_pickle based solely...

CVE-2026-104608: GitHub Enterprise Server: A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld)

A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service babeld. babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invalidate those references. An attacker with ...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 157.0.8103.38 contain a resource management error vulnerability stemming from Aura’s use-after-free behavior. This may allow remote attackers who have already compromised a rendering process to execute arbitrary code outside the sandbox via specially crafted HTML...

CVE-2026-121114: Google Chrome: Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code…

Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

AlmaLinux 9 : libXi (ALSA-2026:93439)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:93439 advisory. libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply CVE-2026-109090 libXi: libXi: Arbitrary code execution via DEVICERESOLUTION...

RHEL 8 : bind9.16 (RHSA-2026:94011)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94011 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

CVE-2026-61495: hathach TinyUSB: TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class…

TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class helper mtpcontainergetstring in src/class/mtp/mtp.h that allows a malicious USB host to corrupt adjacent memory by supplying a crafted MTP string with an unbounded character coun...

PT-2026-136462

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue in Layout allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that occu...

PT-2026-136453

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use-after-free issue exists in the Prerender component. This occurs when a program continues to use a pointer after the memory it points to has been freed, which can lead to memory...

PT-2026-136452

Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-136439

Name of the Vulnerable Software and Affected Versions Puppet Server versions prior to 2023.8.13 Puppet Server versions prior to 2025.12.1 Puppet Server versions prior to 2026.0.1 Description Deserialization of untrusted data in the report-processing code allows a client possessing any CA-signed...

ROS-20261103-73-0108

The vulnerability in Apache ActiveMQ is related to improper handling of web page structures. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

PT-2026-136553

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A type confusion issue exists in DevTools. A remote attacker can use social engineering to lure a user to a crafted HTML page, leading to arbitrary code execution within the sandbox. Ty...