SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:4799-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4799-1 advisory. - CVE-2026-93586: use-after-free in the ImagesToBlob method can lead to a process crash bsc1281912. -...

PT-2026-121381

Name of the Vulnerable Software and Affected Versions Rootblox versions prior to 1.0.6 Description Rootblox contains a PHP Remote File Inclusion issue caused by improper control of filenames used in include or require statements. This allows for PHP Local File Inclusion, where an attacker can...

PT-2026-121494

The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads. When Agent Zero reproduces content in the chat interface, any injected JavaScript is executed in the context of the victim’s authenticated Agent Zero Web UI session...

PT-2026-121479

Name of the Vulnerable Software and Affected Versions PhpSpreadsheet versions 3.3.0 through 3.10.7 PhpSpreadsheet versions prior to 5.10.0 Description Processing attacker-controlled SpreadsheetML XML can lead to entity-expansion denial of service, local file access, or Server-Side Request Forgery...

PT-2026-121406

CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file editable screenshot annotations. Exploitation requires an attacker to craft a malicious .cleanshot file, deliver it to the target, and have the target open it; the payload then executes automaticall...

CVE-2018-25438: Improper Limitation of a Pathname to a Restricted Directory

Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file'...

PT-2026-121337

Name of the Vulnerable Software and Affected Versions Academist Core versions prior to 1.4.1 Description An improper control of filename for include/require statement in the PHP program allows for Local File Inclusion. This occurs when the application fails to properly validate the file path used...

CVE-2022-51025: Improper Limitation of a Pathname to a Restricted Directory

Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files via the name parameter of /webapi/file/transfer. Attackers can send GET requests with type=dbbackup and ../ sequences in name to read files like...

PT-2026-121357

Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCompare endpoints that allows authenticated members to read arbitrary files. Attackers with repository write access can commit a symlink pointing outside the project directory to read...

Linux Distros Unpatched Vulnerability : CVE-2026-115207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow t...

ROS-20261022-73-0044

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the use of an untrusted network policy file. Exploiting these vulnerabilities allows a malicious actor to compromise the integrity of protected information...

ROS-20261022-73-0019

The vulnerability of the RDPDR IRP RDP-client FreeRDP module is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain access to read, write, and delete arbitrary files...

Linux Distros Unpatched Vulnerability : CVE-2026-92205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on...

PT-2026-120891

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail usercopy plugin. With the file based backend, the source path was built from the login name without rejecting path separators, so a login name containing a slash could cause...

CVE-2021-48013: Improper Limitation of a Pathname to a Restricted Directory

Weaver E-cology 8.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files through the fpath parameter of the /weaver/ln.FileDownload endpoint. Attackers can send crafted GET requests with directory traversal sequences in fpath to retrieve sensitive...

Red Hat OpenShift post-link vulnerability

Red Hat OpenShift Container Platform version 4 contains a post-link vulnerability. This vulnerability arises because when using oc image extract to extract container images, the OpenShift client fails to properly remove symbolic links and hard link targets pointing to absolute paths or directorie...

PT-2026-121431

Name of the Vulnerable Software and Affected Versions fpdf2 versions prior to 2.8.8 Description The shared image loader in this PDF creation library automatically dereferences attacker-controlled HTTPS URLs and raw local paths. This occurs when input is supplied through the FPDF.image function,...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a memory corruption flaw in the web management interface. Authenticated low-privilege attackers with local access can exploit this vulnerability to view certain system files and disrupt the normal operation of affected services...

Cisco Snort OLE VBA Decompression Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Snort. Authentication is not required to exploit this vulnerability. The specific flaw exists within the decompression of VBA data in OLE file streams. The issue results from the lack of proper...

NVIDIA Megatron Bridge YAML File Parsing Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...