RockyLinux 8 : go-toolset:rhel8 (RLSA-2026:22112)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:22112 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass...

CVE-2026-75327

In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:...

PT-2026-81983

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

PT-2026-82115

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the L2TP module when userspace closes /proc/net/pppol2tp or /sys/kernel/debug/l2tp/tunnels before reaching the end-of-file. The iteration state,...

PT-2026-81951

Name of the Vulnerable Software and Affected Versions Avada versions prior to 7.16.1 Fusion Builder versions prior to 3.16.1 Description An unauthenticated attacker can achieve remote code execution and complete site compromise by writing attacker-controlled PHP files to the server. This is...

CVE-2026-36851

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

PT-2026-82321

Name of the Vulnerable Software and Affected Versions tamguo version 1.5.3 Description An unrestricted file upload issue allows for stored Cross-Site Scripting XSS, a technique where malicious scripts are permanently stored on the target server. The '/uploadFile' and '/imgUpload' endpoints within...

PT-2026-82218

Name of the Vulnerable Software and Affected Versions Mage AI affected versions not specified Description The browser-items API does not restrict accepted paths to the project directory. Specifically, the BrowserItemResource in mage ai/api/resources/BrowserItemResource.py passes caller-supplied...

PT-2026-82319

Name of the Vulnerable Software and Affected Versions DocSys-master version 2.02.85 Description An arbitrary file read issue exists in the 'downloadDocEx' interface located in src/com/DocSystem/controller/DocController.java. This allows an attacker to read files from the system that they should n...

CVE-2026-75328

In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:...

CVE-2026-75328

DocSys-master V2.02.85 is affected by an arbitrary file read vulnerability in the downloadDocEx interface located in src/com/DocSystem/controller/DocController.java. The vulnerability is reachable over the network with no authentication required , yielding a CVSS 3.1 score of 7.5 (HIGH) with high...

CVE-2026-75331

tamguo 1.5.3 is affected by an Unrestricted File Upload vulnerability that leads to Stored XSS . The /uploadFile and /imgUpload endpoints in FileUploadController.java and UEditorController.java lack file type validation, allowing authenticated attackers to upload arbitrary HTML or JavaScript file...

PT-2026-82050

Arbitrary file overwrite via SAVE PROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...

PT-2026-82317

Improper neutralization of special elements in Plesk allows remote authenticated users to disclose arbitrary local files and escalate privileges...

EUVD-2026-66749

DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath...

CVE-2026-75413

DocSys V2.02.80 contains an Any File Download vulnerability in the downloadDocEx.do interface. An unauthenticated attacker can exploit the targetPath parameter to download arbitrary files over the network without any prior authentication. The CVSS 3.1 score is 7.5 (HIGH) , reflecting a network at...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104787)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104787 advisory. ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the Unity...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104790)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104790 advisory. Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: pcp (UTSA-2026-093148)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093148 advisory. A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUS...

Tenable Security Center SCAP Audit File Command Injection

This is a Metasploit module that demonstrates how Tenable Security Center versions prior to 6.9.0 allow an authenticated user to achieve command execution as the web service account tns via the SCAP audit file upload flow. This module requires Metasploit: https://metasploit.com/download Current...