125925 matches found
vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion
There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware...
Important: Red Hat Security Advisory: vim security update
An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
CVE-2026-13392
The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not prevent a custom-widget definition saved by a user with administrative capabilities from being written verbatim into a generated PHP file that the ElementsKit Elementor Addons WordPress plugin before 3.10.01 subsequently...
Debian dsa-6406 : libapache2-mod-php8.4 - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6406 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6406-1 [email protected] https://www.debian.org/securit...
PT-2026-75902
Name of the Vulnerable Software and Affected Versions Incus versions prior to 7.3.0 Description An unprivileged, project-confined user with can create images and can create instances permissions can execute arbitrary code as root on the host. This occurs when a crafted image includes a backup.yam...
JetBrains PyCharm < 2026.1.4 / 2026.2 Arbitrary Code Execution
According to its self-reported version, the JetBrains PyCharm installation on the remote host is prior to 2026.1.4. It is, therefore, affected by an arbitrary code execution vulnerability. In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was...
IBM Langflow OSS command injection vulnerability
IBM Langflow OSS is an open-source low-code visualization AI workflow building tool developed by IBM. It enables developers to quickly build, deploy, and iterate AI agents and RAG applications through drag-and-drop components. Additionally, it supports deep customization using Python to integrate...
IBM Langflow OSS code injection vulnerability
IBM Langflow OSS is an open-source low-code visualization AI workflow building tool developed by IBM. It enables developers to quickly build, deploy, and iterate AI agents and RAG applications by dragging and dropping components. Additionally, it supports deep customization using Python to...
Adobe Bridge < 15.1.7 / 16.x < 16.0.6 Multiple Vulnerabilities (APSB26-89)
The version of Adobe Bridge installed on the remote Windows host is prior to 15.1.7 or 16.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-89 advisory. - Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code executi...
The vulnerability of the Pillow image processing library, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.
The vulnerability of the Pillow image processing library is related to overflow in the dynamic memory buffer. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
JetBrains PhpStorm < 2026.2 Multiple Vulnerabilities
According to its self-reported version, the JetBrains PhpStorm installation on the remote host is prior to 2026.2. It is, therefore, affected by a multiple vulnerabilities. - In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project toolin...
RHEL 10 : vim (RHSA-2026:48650)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:48650 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Denial of Service via stack out-of-bounds...
KLA91186 ACE vulnerability in Microsoft Office
Arbitrary code execution vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-62870 Exploitation CVE list CVE-2026-62870 critical KB list 5002886 Solution Install necessary updates from the KB section,...
The vulnerability of the MNG encoder in the console-based image editing tool ImageMagick allows a hacker to execute arbitrary code.
The vulnerability of the MNG encoder in the console-based image editing tool ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of Google Chrome’s user interface allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s user interface relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the libcaca graphic library, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.
The vulnerability of the libcaca graphic library is related to overflow in the buffer in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Python library for interacting with git repositories, GitPython, arises from improper code generation management. This allows attackers to execute arbitrary code.
The vulnerability of the Python library for interacting with git repositories, GitPython, is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Geomap panel on the Grafana monitoring and observation platform allows a intruder to execute arbitrary code.
The vulnerability of the Geomap panel of the Grafana monitoring and observation platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
The vulnerability of the Mojo browser library in Google Chrome allows a hacker to execute arbitrary code.
The vulnerability of the Mojo library in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...