92630 matches found
PT-2026-117949
EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt on gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls start...
PT-2026-125048
Pingora versions prior to 0.9.0 accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI session.req header.uri saw the :authority value, but the upstream received the client-supplied Host value. Pingora...
PT-2026-118586
Name of the Vulnerable Software and Affected Versions @apostrophecms/ai-helper versions 1.0.0-beta.10 through 1.0.0-beta.12 Description An authenticated editor can trigger a Server-Side Request Forgery SSRF by exploiting the way the server resolves image URLs. When a global base URL is not...
Siemens SIMATIC S7-1500 TM MFP Integer Underflow (CVE-2026-31617)
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: validate minimum blocklen in ncmunwrapntb The blocklen read from the host-supplied NTB header is checked against ntbmax but has no lower bound. When blocklen is smaller than opts-ndpsize, the bounds check of:...
Linux Distros Unpatched Vulnerability : CVE-2026-110180
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from 3.1.3 through 3.1.8, and from 4.0.1...
PT-2026-120296
Summary The @apostrophecms/ai-helper package builds the URL for a server-side image fetch by resolving a storage-relative path against req.baseUrl. When the site does not set a global base URL the default, req.baseUrl is derived from the incoming HTTP Host header. An authenticated editor can...
PT-2026-117938
JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system commands via an unsandboxed execute tool in Copilot standard mode. Attackers can self-register, select standard mode in the WebSocket chat.start extension, and have the...
PT-2026-117933
Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI session.req header.uri saw the :authority value, but the upstream received the client-supplied Host value...
Linux Distros Unpatched Vulnerability : CVE-2026-111749
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an existing parent-domain cookie can be...
PT-2026-118477
HarfBuzz 8.0.0 through 14.6.0 contains an out-of-bounds write vulnerability in the experimental WebAssembly shaper because the font glyph to string import has a wrong WAMR signature. Attackers can supply a crafted font whose wasm module places the output buffer near linear memory's end, writing...
Ubuntu: USN-8927-1 (CVE-2026-86410): curl vulnerabilities
A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2024-56647)
In the Linux kernel, the following vulnerability has been resolved: net: Fix icmp host relookup triggering iprtbug arp link failure may trigger iprtbug while xfrm enabled, call trace is: WARNING: CPU: 0 PID: 0 at net/ipv4/route.c:1241 iprtbug+0x14/0x20 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm...
Linux Distros Unpatched Vulnerability : CVE-2026-98546
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64/boot: Disable trapping of PMZREL0 writes to EL2 initel2fgt2 writes one mask to both HDFGRTR2EL2 and HDFGWTR2EL2. PMZREL0 is write-only, so its trap bit,...
Linux Distros Unpatched Vulnerability : CVE-2026-98718
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SEV: Do cache maintenance on the source VM before clearing SEV state Explicitly flush caches after intra-host migration before clearing SEV active on the...
Security update for tinyproxy (critical)
openSUSE security update: security update for tinyproxy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22133-1 Rating: critical References: bsc1268474 bsc1268475 bsc1268476 Cross-References: CVE-2026-54387 CVE-2026-54388 CVE-2026-55202 Affected...
PT-2026-120146
The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rogue FTP server can specify any IP:port in the 227 Passive Mode response, causing the operator's machine to open a TCP connection to an arbitrary host...
CVE-2026-98546
A flaw was found in the Linux kernel's ARM64 architecture support. When user-space access to performance monitoring counters is enabled, write traps for a write-only performance register are improperly configured during hypervisor initialization. A local user can exploit this vulnerability by...
Malicious code in asurion (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393ccbeed4c71a6a21a3a697f0809845dddec09ddc8884662f40e2b2257a28a9 setup.py executes at pip install time and POSTs a JSON payload containing the full os.environ dictionary along with hostname, username, current worki...
CVE-2026-111749
A flaw was found in aiohttp. When processing HTTP cookies, a response from an untrusted subdomain can remove the Host-Only attribute from an existing parent-domain cookie. This vulnerability allows an attacker controlling a subdomain to bypass domain isolation protections, potentially exposing...
