The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Microsoft Remote Desktop Client for Windows client involves an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Remote Desktop Client for Windows client involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Microsoft Visual Studio software lies in the fact that operations are performed outside the buffer boundaries of memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software development tool is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the Microsoft Office software relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Microsoft Dynamics 365 Customer Engagement (CE) CRM system, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 Customer Engagement CE CRM system is related to improper code generation. Exploitation of this vulnerability could allow an attacker operating remotely to execute arbitrary code...

PT-2026-107421

A critical buffer overflow CVE-2026-15340 affects Savannah lwIP SMTP client v2.2.1, risking remote code execution. CISA urges immediate patching to protect embedded systems and critical infrastructure. lwIP CISAAlert BufferOverflow SOCMinute https://t.co/xcpXVKmfAg...

Linux Distros Unpatched Vulnerability : CVE-2026-106358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...

UBUNTU-CVE-2026-106445

Handlebars provides the power necessary to let users build semantic te...

Linux Distros Unpatched Vulnerability : CVE-2026-102322

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page...

AlmaLinux 8 : freerdp (ALSA-2026:76747)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:76747 advisory. FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command CVE-2026-91954 FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in...

RockyLinux 8 : freerdp (RLSA-2026:76747)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:76747 advisory. FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command CVE-2026-91954 FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in...

PT-2026-107562

LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /run script endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import , to...

Apache SeaTunnel 3.0.0 Remote Code Execution

Apache SeaTunnel versions 3.0.0 and 2.3.13 contain an unauthenticated remote code execution issue in the engine REST API DynamicCompile transform. !/usr/bin/env python Apache SeaTunnel 3.0.0 Remote Code Execution Vendor: The Apache Software Foundation Product web page: https://seatunnel.apache.or...

PT-2026-107531

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 1.14.6 Backstage versions prior to 1.15.4 Description The @backstage/plugin-techdocs-node package allows remote code execution through crafted markdown extensions within the mkdocs.yml file. An authenticated user wi...

Linux Distros Unpatched Vulnerability : CVE-2026-82531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocachehash is never restored during extends:/multi-compone...

CVE-2026-97655 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scanner...

CVE-2026-97655

Langflow OSS versions 1.0.0 through 1.12.2 are affected by CVE-2026-97655 , which allows a remote attacker to execute arbitrary code. The root cause is an incomplete blocklist within the code security scanner, classified as CWE-94: Improper Control of Generation of Code ('Code Injection') . This ...

CVE-2026-104334 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of code generation...

CVE-2024-21513

CVE-2024-21513 CVE-2024-21513 的概念验证（PoC） 漏洞利用原始文档由 Snyk 安全研究团队提供 漏洞利用 CVE-2024-21513 是 langchain-experimental 中的一个漏洞：未经验证的 SQL 查询结果被传递给 Python 的 eval 函数，从而通过基于 SQL 的输入注入实现远程代码执行。 PoC 结构 本 PoC 是一个极其基础的 Flask 应用，内嵌 HTML，用户可以在 SQLite 数据库中输入坐标。 如果用户在 y 值中输入恶意载荷，有漏洞的 LangChain-Experimental 功能会根据 x 值获取...

CVE-2020-5902

CVE-2020-5902 / \ \ / / | | \ / \ \ / \ | / \ / \ \ | | \ \ / /| | | | | | | | | || || | | | | | | | \ / / | |/ /| | | |/ /| | | || \, | | | |/ / | | \ / | | / /| || / /| || | | / /| || / / | / || ||/|/ |/ // /| CVE-2020-5902-Scanner.py @nsflabs F5 BIG-IP...