EUVD-2026-81910

HortusFox-Web prior to version 6.1 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary OS commands as the web server user by abusing the Import/Export functionality. Attackers can leverage the Import/Export feature, which is intended solely...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744 exploit de RCE ejecución...

CVE-2026-89036 Appwrite < 2.0.0 Argument Injection via providerRootDirectory Parameter

Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write or sites.write permissions to execute arbitrary commands by injecting TAB characters into the providerRootDirectory parameter used to construct GNU tar commands. The application...

CVE-2026-89036 Appwrite < 2.0.0 Argument Injection via providerRootDirectory Parameter

Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write or sites.write permissions to execute arbitrary commands by injecting TAB characters into the providerRootDirectory parameter used to construct GNU tar commands. The application...

CVE-2026-89036

Appwrite before 2.0.0 contains an argument injection vulnerability in the providerRootDirectory parameter used to construct GNU tar commands. The root cause is the use of escapeshellcmd instead of escapeshellarg without proper quoting, allowing TAB characters to survive sanitization and be interp...

CVE-2026-89036 Appwrite < 2.0.0 Argument Injection via providerRootDirectory Parameter

Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write or sites.write permissions to execute arbitrary commands by injecting TAB characters into the providerRootDirectory parameter used to construct GNU tar commands. The application...

GHSA-9FXX-MV6C-J5XP Duplicate Advisory: NodeVM nesting guard accepts array-shaped require and permits host RCE

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8hr7-r645-pc6w. This link is maintained to preserve external references. Original Description vm2 is a sandbox for running untrusted Node.js code. In versions = 3.11.4 and = 3.11.6, the NodeVM constructor comput...

Duplicate Advisory: NodeVM nesting guard accepts array-shaped require and permits host RCE

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8hr7-r645-pc6w. This link is maintained to preserve external references. Original Description vm2 is a sandbox for running untrusted Node.js code. In versions = 3.11.4 and = 3.11.6, the NodeVM constructor comput...

GHSA-3F84-VWV5-R42G Duplicate Advisory: vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-647f-g98j-qq25. This link is maintained to preserve external references. Original Description vm2 3.11.6 is vulnerable to a sandbox escape leading to remote code execution in the host Node.js process. The fix fo...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

CVE-2026-71538 @cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument on Windows

@cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. Prior to version 6.0.0, the Windows fallback path in src/npmRunner.ts, used when npmexecpath does not provide the npm CLI path, can construct a shell command containing an untrusted value from the --workspace...

CVE-2026-92944

vm2 versions 3.10.2 through 3.11.6 contain a sandbox escape vulnerability on Node.js 26 where Promise.prototype.finally bypasses vm2's wrapper protections due to a stale PromiseThenLookupChain protector in V8 14.6. Attackers can exploit this by creating an async function that returns a Promise wi...

CVE-2026-92946

vm2 before 3.11.7 contains a remote code execution vulnerability when require.external is enabled without an explicit require.root that excludes nodemodules. Sandboxed code can require vm2's own package, instantiate an unrestricted NodeVM instance, and execute arbitrary host OS commands via...

CVE-2026-92937

vm2 3.11.6 is vulnerable to a sandbox escape leading to remote code execution in the host Node.js process. The fix for GHSA-m283-3h24-438v is incomplete: the bridge gate at lib/bridge.js:1624 identity-checks only the direct call target when deciding whether to rebuild/sanitise a rejected host...

CVE-2026-80355

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery CSRF vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-62104

Unauthenticated Remote Code Execution RCE in Migratico Lite = 2.6.8 versions...

Malicious code in tailwindcss-contact-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b198bc6d5af472f9cb1f1db25acf0215b77c04a742fcce81fef5565d76d837b Package presents itself as the Tailwind CSS forms plugin README is a verbatim copy of @tailwindcss/forms and its package.json points at...

MAL-2026-16251 Malicious code in tailwindcss-contact-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b198bc6d5af472f9cb1f1db25acf0215b77c04a742fcce81fef5565d76d837b Package presents itself as the Tailwind CSS forms plugin README is a verbatim copy of @tailwindcss/forms and its package.json points at...

Exploit for Command Injection in Microsoft

CVE-2026-49179: Active Directory WriteSPNScript Command Inject...

CVE-2026-92948 vm2 3.9.6 through 3.11.5 Sandbox Escape via node:test

vm2 versions = 3.9.6 and therefore executes arbitrary JavaScript in an unrestricted host Node process outside the NodeVM sandbox. Fixed in vm2 3.11.7...