MSC-2026-12756

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

MSC-2026-12872

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...

flatpak: Flatpak: Arbitrary code execution via missing symlink protection

A flaw was found in Flatpak. A malicious sandboxed application can exploit missing symlink protection during the creation and bind-mounting of app data directories. By manipulating attacker-controlled path components, a malicious symlink can redirect these directories to arbitrary locations on th...

flatpak-builder: Host code execution via `git am` hook execution in patch source extraction (`use-git-am`)

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

hostintel

hostintel Esta herramienta se utiliza para recopilar diversas fuentes de inteligencia sobre hosts. Hostintel está escrito de forma modular para que se puedan añadir fácilmente nuevas fuentes de inteligencia. Los hosts se identifican por nombre de host FQDN, dominio o dirección IP. Esta herramient...

goscan

GoScan es un cliente interactivo de escaneo de redes, con autocompletado, que proporciona abstracción y automatización sobre nmap. Aunque comenzó como un pequeño proyecto paralelo que desarrollé para aprender @golang, GoScan ahora se puede usar para realizar descubrimiento de hosts, escaneo de...

meg

meg meg es una herramienta para obtener muchas URLs pero siendo 'amable' con los servidores. Se puede usar para obtener muchas rutas de muchos hosts; obteniendo una ruta para todos los hosts antes de pasar a la siguiente ruta y repetir. Obtienes muchos resultados rápidamente, pero ninguno de los...

PT-2026-110955

🚨 CVE-2026-96261 IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boo...

PT-2026-110958

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware versions FW1060.00 through FW1060.81 Description A flaw exists in the service processor mailbox interface. An attacker with authenticated service-level access to the Field Service Processor FSP can send a specially...

PT-2026-110823

An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized length field can cause the firmware to write up to 254 arbitrary bytes past the bounds of an internal, non-persistent memory buffer...

CVE-2026-96263: Stack-based Buffer Overflow

IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted co...

PT-2026-110945

sandboxed.sh through 1.3.0 contains a container escape vulnerability that allows code in container workspaces to access the host filesystem because nsenter attaches without --root. Agent-run code in a container workspace can resolve absolute paths on the host to read and modify host files,...

CVE-2026-109339: Allocation of Resources Without Limits or Throttling

SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust server memory because module stdout/stderr lines are buffered unbounded in host memory, bypassing the configured module memory limit. An attacker can run an Owner-installed malicious module that writes output without newlines, crashing...

CVE-2026-103503: Improper Certificate Validation

Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set cacertspath to a CA store that leaves that CA out...

CVE-2026-90921: Improper Handling of Length Parameter Inconsistency

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process...

PT-2026-110991

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process...

Important: flatpak-builder

Issue Overview: When use-git-am: true is enabled for a patch source, flatpak-builder invokes git am without disabling git hooks. A malicious source can include a post-applypatch hook, which will be executed automatically when a patch with use-git-am: true is applied. Since git itself runs...

Tozed ZLT X300 6.01.3 IPPingDiagnostics Command Injection

Tozed ZLT X300 versions 6.01.0 through 6.01.3 contain an OS command injection vulnerability in the IPPingDiagnostics handler through the Host argument...

PT-2026-110756

SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust server memory because module stdout/stderr lines are buffered unbounded in host memory, bypassing the configured module memory limit. An attacker can run an Owner-installed malicious module that writes output without newlines, crashing...

CVE-2026-6232: Out-of-bounds Write

An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized length field can cause the firmware to write up to 254 arbitrary bytes past the bounds of an internal, non-persistent memory buffer...