523269 matches found
PT-2026-91226
Description Dependency artifacts uploaded with storm jar --artifacts were stored under a blob key derived only from the Maven coordinate, for example dep---.jar. The key was therefore identical for every user of the cluster and predictable in advance. When the blob already existed, the uploader...
PT-2026-91104
đš CRITICAL JOOMLA SECURITY ALERT A CVSS 9.4 RCE vulnerability â CVE-2026-85192 â has been identified in the Regular Labs Conditional Content Pro plugin for Joomla. â ïž Affected versions: 1.0.0 â 7.1.0 The flaw can allow a privileged Joomla user to inject a malicious inline PHP condition into articl...
PT-2026-90998
An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC encoder driver due to improper cleanup of dma buf references...
PT-2026-91561
đĄïž Apple Rolls Out Massive Security Update Fixing 273 Vulnerabilities Across Its Devices Details: https://t.co/oIip0TZTrv Apple has released one of its largest coordinated security rollouts, addressing 273 distinct critical vulnerabilities across iPhone, iPad, Mac, Apple Watch, Apple TV, Vision...
PT-2026-91259
A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicio...
AlmaLinux 10 : freerdp (ALSA-2026:66349)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66349 advisory. FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway CVE-2026-55193 Tenable has extracted the preceding description block directly fr...
RHEL 9 : ansible-core (RHSA-2026:67467)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67467 advisory. Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH...
Amazon Linux 2023 : gstreamer1-plugins-base, gstreamer1-plugins-base-devel, gstreamer1-plugins-base-tools (ALAS2023-2026-2158)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2158 advisory. GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer...
RockyLinux 9 : nginx:1.26 (RLSA-2026:67283)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67283 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the RockyLinu...
Linux Distros Unpatched Vulnerability : CVE-2026-72710
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.18 contains a mass assignment vulnerability in the editerobjet action that allows unauthenticated attackers to write arbitrary rows to any SQL...
Moderate: nginx:1.26 security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...
CVE-2023-50461
An issue was discovered in the directmail aka Direct Mail extension through 9.5.1 for TYPO3. The Configuration backend module of the extension allows an authenticated user to write to an arbitrary TSConfig page for folders configured as Direct Mail. Exploiting this may lead to Configuration...
Important: gstreamer1-plugins-base
Issue Overview: GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target mu...
MiracleLinux 9 : perl-DBI-1.643-9.el9_8.5 (AXSA:2026-1822:04)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1822:04 advisory. DBI: Incomplete fix for CVE-2026-14380 DBI: Arbitrary code execution via caller-influenced Profile attribute CVE-2026-19546 Tenable has extracted the precedi...
PT-2026-91513
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lead to arbitrary code execution...
ALSA-2026:67283 Moderate: nginx:1.26 security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...
CVE-2025-55182
đĄïž CVE-2025-55182 - Comprender y Mitigar una Vulnerabilidad đ Comenzando Bienvenido al proyecto CVE-2025-55182. Esta guĂa te ayudarĂĄ a comprender la vulnerabilidad y proporciona los pasos para descargar y ejecutar el software que necesitas. đ„ Descargar la AplicaciĂłn đ ÂżQuĂ© es CVE-2025-55182?...
CVE-2026-14266
CVE-2026-14266 â 7-Zip XZ Decoder Heap Buffer Overflow Critical Severity | CVSS: 8.8 High | CWE-122: Heap-based Buffer Overflow Affected: 7-Zip †26.01 | Patched: 7-Zip 26.02 2026-06-25 Discovered & Analyzed by: Li Yuxuan liyuxuan504-byte and team Executive Summary A heap buffer overflow exists i...
CVE-2025-48593
CVE-2025-48593 : Exécution de code à distance sans clic dans le systÚme Android Auteur : LAKSHMIKANTHAN K letchupkt Date : Novembre 2025 Sévérité : Critique Une vulnérabilité critique d'exécution de code à distance sans clic affectant les appareils Android 13 à 16. Aperçu de la vulnérabilité...
CVE-2025-53770
CVE-2025-53770 This is a scanner for the SharePoint unauthenticated Remote Code Execution vulnerability, assigned CVE number CVE-2025-53770. The code for this was written by reverse-engineering a payload seen in the wild. Use at your own risk, I am not responsible for any negative impact this mig...