(0Day) Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the checkdetdataset...

(0Day) Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the torchsafeload...

(0Day) (Pwn2Own) Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the framework service. The issue results from an exposed dangerous...

ROS-20261028-73-0020

The vulnerability in the dosetupenv function session.c within the sshd service of OpenSSH is related to access control flaws. Exploitation of this vulnerability could allow an attacker to escalate their privileges...

AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793100968)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793100968 advisory. - In the Linux kernel, the following vulnerability has been resolved: udf: Avoid double brelse in udfrename syzbot reported a warnin...

PT-2026-127805

A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString of the file renderers/web core/src/v0 9/basic catalog/expressions/expression parser.ts of the component Parser. This manipulation causes resource consumption. The attack may be...

PT-2026-128196

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.273 Description A slab-use-after-free issue exists in the pipe fasync notifications. The problem occurs when fasync helper fails to allocate a writer entry after updating a reader entry for an O RDWR FIFO. I...

PT-2026-128129

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.29 Linux kernel versions prior to 5.10.273 Description A race condition exists in the dm-crypt module within the crypt dec pending function. The issue occurs because the function reads the io-error variable...

PT-2026-127859

The Contact Manager plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 9.1.2 via the add message function. This is due to an incomplete extension blacklist that fails to detect dangerous extensions when a trailing dot causes the extension-derivation...

PT-2026-128334

The GPIO syscall handlers in drivers/gpio/gpio handlers.c did not validate the pin argument supplied by a user-mode caller. z vrfy gpio pin configure, z vrfy gpio pin get config and z vrfy gpio pin interrupt configure verified only the device object K SYSCALL DRIVER GPIO / K SYSCALL OBJ and then...

PT-2026-128343

Name of the Vulnerable Software and Affected Versions HTTP::Body versions prior to 1.23 01 Description In chunked mode, which is utilized when no content length is provided, the add function fails to correctly track chunk boundaries in request bodies if a read operation ends inside a chunk...

PT-2026-129083

Name of the Vulnerable Software and Affected Versions MIME::Field::ParamVal versions prior to 5.521 Description An issue exists where an RFC 2231 filename containing a hyphenated language tag is converted into an empty recommended filename. This occurs because a parameter like...

PT-2026-129086

Name of the Vulnerable Software and Affected Versions MIME::Field::ParamVal versions prior to 5.521 Description The software fails to flag duplicate boundary parameters when the parameter name contains a nested comment. For example, parameters written as boundaryc="A" or boundary="A" are stored...

PT-2026-128320

Alpine iLX-F511 prh sdp service search decode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a...

CVE-2026-99125

In the Linux kernel, the following vulnerability has been resolved: s390/pai: Handle multiple PMU stop callback invocations Handle the following scenario: The kernel protects itself against a very high sampling load and throttles the sampling using: perfeventthrottle -- PMU-stop Shortly later the...

CVE-2026-99126

In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Prevent XID null dereference The mpcvalidatexid function sets grp-savedxid2-xid2flag2 to 0x40 to signal XID validation error. If peer XID is NULL or r/w channel pairing mismatch happens, grp-savedxid2 is never...

UBUNTU-CVE-2026-99125

In the Linux kernel, the following vulnerability has been resolved: s390/pai: Handle multiple PMU stop callback invocations Handle the following scenario: The kernel protects itself against a very high sampling load and throttles the sampling using: perfeventthrottle -- PMU-stop Shortly later the...

PT-2026-129227

Name of the Vulnerable Software and Affected Versions D-Link DIR-505 version 1.10B02 Description A hidden backdoor exists in the Web Management CGI component. A remote attacker can trigger this backdoor by manipulating the accu, pass, code, hash, and cmds arguments within the main function of the...

PT-2026-130563

filelock on Windows ignores the mode argument. FileLockpath, mode=0o600 creates the same file as FileLockpath: one with no security descriptor of its own the Windows record that says who may access a file. Its access list, or ACL, is whatever the lock directory hands down to new files. filelock...

CVE-2026-118276: a2ui-project a2ui: A vulnerability was determined in a2ui-project a2ui up to 0.10.6

A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString of the file renderers/webcore/src/v09/basiccatalog/expressions/expressionparser.ts of the component Parser. This manipulation causes resource consumption. The attack may be...