Linux Distros Unpatched Vulnerability : CVE-2026-65915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open where the sandbox validation check compares a normalized path against itself, maki...

Linux Distros Unpatched Vulnerability : CVE-2026-62383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypass nltk.pathsec validation entirely...

Security update for apptainer (important)

openSUSE security update: security update for apptainer ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21611-1 Rating: important References: bsc1275248 Cross-References: CVE-2026-17106 CVSS scores: CVE-2026-17106 SUSE : 7.1...

Linux Distros Unpatched Vulnerability : CVE-2026-68766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and...

Linux Distros Unpatched Vulnerability : CVE-2026-62385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside...

Linux Distros Unpatched Vulnerability : CVE-2026-62384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus...

Linux Distros Unpatched Vulnerability : CVE-2026-76018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2026-70626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open that allows local attackers to read arbitrary files outside the corpus...

PT-2026-79573

Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik 4.7.2 - The list email plugin controller allows to upload non-executable files to the webroot...

Linux Distros Unpatched Vulnerability : CVE-2026-63312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open directly...

Linux Distros Unpatched Vulnerability : CVE-2026-71514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. loadlangngrams joins the corpus root with crubadancode, the column-0...

PT-2026-79743

Name of the Vulnerable Software and Affected Versions docker-socket-proxy versions prior to 0.5.1 Description Insufficient access control granularity occurs when the CONTAINERS environment variable is set, failing to properly gate read endpoints within the /containers Docker API namespace. This...

BlackHat-Europe-2022

BlackHat-Europe-2022 Select Bugs From Binary Where Pattern Like CVE-1337-Days Resumen La revisión estática de código es una forma eficaz de descubrir variantes de vulnerabilidades y primitivas de explotación, pero dos de las tareas más desafiantes del análisis estático son la extracción eficaz de...

pyOneNote

pyOneNote pyOneNote es una biblioteca ligera de Python para leer archivos de OneNote. El objetivo principal de este analizador es permitir a los analistas de ciberseguridad extraer información útil de los archivos de OneNote. Instalación del analizador Instalación de la última versión en desarrol...

CVE-2026-49360

Recce is a data-validation toolkit for enhanced dbt data build tool PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured...

CVE-2026-47735

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-SQL validator internal/api/query.go:ValidateSQLRequest blocked only readparquet and arcpartitionagg via regex denylist. The broader DuckDB I/O function family — readcsvauto, readcsv, readjson,...

CVE-2026-49360 Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB

Recce is a data-validation toolkit for enhanced dbt data build tool PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured...

CVE-2026-49360 Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB

Recce is a data-validation toolkit for enhanced dbt data build tool PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured...

CVE-2026-49360

Recce (a data-validation toolkit for dbt PR review) versions prior to 1.50.0 are vulnerable to unauthenticated SQL execution through the query run API when deployed with a DuckDB-backed project and exposed to an untrusted network without authentication. An attacker can leverage DuckDB filesystem ...

CVE-2026-48105 Arc Enterprise cluster FSM applyRegisterFile accepts arbitrary file paths without validation, enabling cluster-wide path-traversal worm primitive

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's Raft FSM internal/cluster/raft/fsm.go:applyRegisterFile accepts attacker-chosen file paths in manifest-registration proposals without validating them against the configured storage backend. T...