PT-2026-97844

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A remote authenticated attacker can execute arbitrary commands due to improper neutralization of environment variables. Recommendations At the moment, there is no information abou...

CVE-2026-81552: Improper Neutralization of Special Elements used in an OS Command

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of environment variables...

ROS-20260924-73-0045

The vulnerability of the ip6makeskb function in the net/ipv6/ip6output.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-84679

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The AWXTASKENV setting accepts arbitrary environment variable keys with no restriction, and its values are applied directly to the running automation controller web and task processes rather than only to sandboxed...

CVE-2026-76805

A flaw was found in Nuclei, a vulnerability scanner. A malicious scan target can exploit a vulnerability in the Dynamic Application Security Testing DAST/fuzz mode where response content is evaluated twice and reinterpreted as template syntax. This allows the scan target to disclose sensitive...

CVE-2026-63278

A flaw was found in LibreOffice. A remote attacker could craft a malicious document containing specially constructed URLs. When a user opens this document, these URLs could expand environment variables or INI file values, leading to the exfiltration of potentially sensitive information to a remot...

The vulnerability of the PyPart::setDeepSliceData() function in software for storing OpenEXR images with a wide dynamic range in brightness levels allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the PyPart::setDeepSliceData function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access t...

PT-2026-97540

Name of the Vulnerable Software and Affected Versions Ansible Automation Platform automation-controller affected versions not specified Description A flaw exists in the custom Credential Type environment-variable injector. The system validates variable names using a deny-list consisting of an...

CVE-2026-76805

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST/fuzz payload path in pkg/fuzz/parts.go can evaluate substituted runtime data more than once, creating a second evaluation pass that allows response content captured by an internal: true extractor...

CVE-2026-76805

The vulnerability scanner Nuclei (versions 3.0.0 through 3.10.0 ) is vulnerable to environment variable disclosure due to an incomplete fix for CVE-2026-41645. The flaw exists in the DAST/fuzz payload evaluation path (pkg/fuzz/parts.go), where substituted runtime data can be evaluated more than o...

CVE-2026-63278 Package URLs can be used to exfiltrate arbitrary INI file values and environment variables

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not recognise every way of naming the package content...

CVE-2026-63278 Package URLs can be used to exfiltrate arbitrary INI file values and environment variables

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not recognise every way of naming the package content...

PT-2026-96836

Name of the Vulnerable Software and Affected Versions Nuclei versions 3.0.0 through 3.9.9 Description In DAST and fuzz modes, the payload path in pkg/fuzz/parts.go can evaluate substituted runtime data multiple times. This occurs when a multi-step template captures response content using an...

PT-2026-96706

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description URLs can be constructed to expand environment variable or INI file values, allowing potentially sensitive information to be exfiltrated to a remote server when a...

CVE-2026-76805: Exposure of Sensitive Information to an Unauthorized Actor

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST/fuzz payload path in pkg/fuzz/parts.go can evaluate substituted runtime data more than once, creating a second evaluation pass that allows response content captured by an internal: true extractor...

CVE-2026-36471

Deserialization of Untrusted Data of the postdata parameter in cnparseurl in CuteNews v.2.1.2 allows a remote attacker to inject arbitrary values into internal request variables including referer via a crafted base64-encoded serialized PHP payload submitted as a POST parameter...

MAL-2026-16296 Malicious code in py-venv-doctor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 976f29262fc2c20f615a0aa8b0e0bb9cd3ab3cbbe1c019da6f17c3c8c108d185 On every CLI invocation, py-venv-doctor's default 'telemetry' path builds a snapshot containing the complete os.environ dictionary all environment...

Malicious code in py-venv-doctor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 976f29262fc2c20f615a0aa8b0e0bb9cd3ab3cbbe1c019da6f17c3c8c108d185 On every CLI invocation, py-venv-doctor's default 'telemetry' path builds a snapshot containing the complete os.environ dictionary all environment...

ROS-20260918-73-0019

The vulnerability of the xfrm6getsaddr function in the net/ipv6/xfrm6policy.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of uninitialized variables. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrit...

Improper Encoding or Escaping of Output

Overview djust is a Phoenix LiveView-style reactive components for Django with Rust-powered performance. Real-time UI updates over WebSocket, no JavaScript build step required. Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via improper handling of...