Microsoft Office 365 Apps for Enterprise Buffer Overflow

The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Access Code Execution

The vulnerability of Microsoft Access database management systems, as well as Microsoft Office and 365 Apps for Enterprise applications, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

MariaDB Memory Use Code Execution

The vulnerability of the MariaDB database management system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-113252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside...

ROS-20261021-73-0055

The vulnerability of the CliprdrStreamRead, wfcliprdrserverfilecontentsresponse, and cliprdrreadfilecontentsresponse functions in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Apache Camel 4.22.0 JGroups Unsafe Java Deserialization

Apache Camel version 4.22.0 camel-jgroups contains an unsafe Java deserialization issue in cluster message processing. The proof of concept demonstrates attacker-controlled object deserialization using a benign marker class. https://packetstorm.news/download/236735...

AlmaLinux 9.2 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792603232)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792603232 advisory. - PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not...

Linux Distros Unpatched Vulnerability : CVE-2026-113285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a...

Atlassian Confluence 7.1.x < 9.2.26 / 9.3.x < 10.2.17 / 11.0.0 (CONFSERVER-104421)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104421 advisory. - jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8,...

Linux Distros Unpatched Vulnerability : CVE-2026-113210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a craft...

Linux Distros Unpatched Vulnerability : CVE-2026-113273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag...

PT-2026-120749

Name of the Vulnerable Software and Affected Versions Node.js versions 26.x Node.js versions 24.x Node.js versions 22.x Description A flaw in the HTTP Agent connection reuse mechanism allows a client to accept a response as valid even if it was sent before the client issued the request. This occu...

CentOS Linux 8.4 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1792599322)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1792599322 advisory. - PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not...

RockyLinux 10 : .NET 9.0 (RLSA-2026:86172)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:86172 advisory. dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability CVE-2026-58280 dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Informatio...

PHP < 8.2.35 / 8.3.x < 8.3.36 / 8.4.x < 8.4.27 / 8.5.x < 8.5.12 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.2.35, 8.3.x prior to 8.3.36, 8.4.x prior to 8.4.27, or 8.5.x prior to 8.5.12. It is, therefore, affected by multiple remote code execution vulnerabilities as referenced in the 21 October 2026 PHP security advisory. - PHP uses longjmp f...

Linux Distros Unpatched Vulnerability : CVE-2026-113095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Focus in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...

PT-2026-120185

ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allows authenticated users, including read-only reader role holders, to execute Groovy code because GremlinQueryEngine.command lacks scripting authorization checks. Attackers can submit Gremlin commands to the POST...

Fortinet FortiSIEM 7.5 gRPC File Write / Remote Code Execution

Fortinet FortiSIEM version 7.5 contains an unauthenticated gRPC path traversal and NUL-byte injection vulnerability that allows arbitrary file write and remote command execution. https://packetstorm.news/download/236742...

Spring Framework 5.3.17 / 5.2.19 Remote Code Execution

Spring Framework versions 5.3.17 and 5.2.19 contain a remote code execution vulnerability through data binding. The report describes affected deployment conditions, fixed releases, defensive controls, and incident response guidance...

PT-2026-120552

Imperia CMS = 11.5.4 SiteActive TEMPLATE CVE-2026-110355: Unauthenticated SSTI in Imperia CMS 11.5.4 and earlier enables remote code execution via SiteActive's TEMPLATE parameter when PHP is available. https://t.co/PV7cbsAEcp...