RockyLinux 8 : aspell (RLSA-2026:92615)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:92615 advisory. aspell: aspell: Arbitrary code execution via crafted dictionary file CVE-2026-103658 Tenable has extracted the preceding description block directly from the...

AdminNeo SQLite Database-List Drop Arbitrary File Deletion

AdminNeo allows an authenticated SQLite-mode user to delete arbitrary files writable by the PHP process through the database-list drop action. The SQLite driver validates file extensions when creating or renaming databases, but the database-list drop path passes submitted db values directly to...

Rocky Linux 10.2 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc (crlsa-2026_90887)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202690887 advisory. emacs: GNU Emacs: Arbitrary code execution upon opening a file CVE-2026-96269 Tenable has extracted the preceding description block directly from the CIQ securi...

Rocky Linux 9 [CIQ] Security Update: skopeo / skopeo-debuginfo / skopeo-debugsource / skopeo-tests Multiple Vulnerabilities (crlsa-2026_90462)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202690462 advisory. podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HTTP Range headers...

Amazon Linux 2 : awscli (ALAS-2026-4052)

The version of awscli installed on the remote host is prior to 1.18.147-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4052 advisory. Overly permissive file permissions in AWS CLI before 1.44.78 v1 and 2.34.29 v2 on Unix-like systems where the umask has not been...

Amazon Linux 2 : awscli (ALASAWSCLI1-2026-002)

The version of awscli installed on the remote host is prior to 1.27.51-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2AWSCLI1-2026-002 advisory. Overly permissive file permissions in AWS CLI before 1.44.78 v1 and 2.34.29 v2 on Unix-like systems where the umask has not...

RHEL 9 : aspell (RHSA-2026:92458)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:92458 advisory. GNU Aspell is a spell checker designed to eventually replace Ispell. It can either be used as a library or as an independent spell checker. Security...

Amazon Linux 2 : file-roller (ALAS-2026-4050)

The version of file-roller installed on the remote host is prior to 3.28.1-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4050 advisory. A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an...

PT-2026-133299

The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all versions up to, and including, 6.35 via the 'file url' parameter parameter. This is due to insufficient URL prefix validation in...

PT-2026-133283

The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored metadata during its media replace-and-update-links routine, allowing unauthenticated users to inject a PHP object that is instantiated when a user with upload access performs a...

SUSE SLED15: libpython3_13-1_0 / python313 / python313-base / python313-curses / etc (SUSE-SU-2026:4941-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4941-1 advisory. - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression bsc1277111. -...

Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357...

PT-2026-134162

In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with check access permission and then opened it by name. Several places opened it with a plain open or handed the path to a utility that opened it later: the servers.json export and import and the import...

AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793346939)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793346939 advisory. - tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect...

CVE-2016-5636

CVE-2016-5636 PoC for CVE-2016-5636, which is a heap overflow in Python 3.6. This repository includes: crash-with-zip : crash PoC by reading untrusted zip file google-web-engine : crash PoC working on google web engine spawn-shell : a local exploit for spawning shell...

CVE-2026-0827

CVE-2026-0827 The LdeApi.Server.exe process attempts to write MP27AM7Westimation.json to C:\ProgramData\Lenovo\LDE\SYSTEM without impersonation. This directory does not exist by default. Since C:\ProgramData\ allows standard users to create subdirectories, a low-privileged user can create this pa...

CVE-2024-44849

CVE-2024-44849 Author: Extencil [email protected] CVE-2024-44849 is a critical RCE vulnerability that impacts all previous versions up to Qualitor 8.24. Qualitor Website Using this program to attack or compromise any company or system without mutual consent is illegal. The author of this cod...

[SECURITY] Fedora 45 Update: kio-admin-26.08.2-1.fc45

kio-admin implements a new protocol "admin:///" which gives administrative access to the entire system. This is achieved by talking, over dbus, with a root-level helper binary that in turn uses existing KIO infrastructure to run file:// operations in root-scope...

nodejs: nodejs: Permission model bypass via wildcard path matching flaw

A flaw was found in the Node.js Permission Model. Wildcard --allow-fs-read or --allow-fs-write rules can grant access to paths that do not match the intended wildcard when the requested path is shorter than the wildcard prefix and the radix-tree lookup stops comparing early. For example,...

CVE-2026-8824

A flaw was found in vtk. The image reader component, vtkBMPReader, improperly handles input boundaries, leading to a buffer overflow when processing bitmap BMP files. A remote attacker could exploit this vulnerability by providing a specially crafted BMP file, causing the application to crash and...