207995 matches found
Arbitrary Code Injection
Langroid is vulnerable to Arbitrary Code Injection. The vulnerability is due to improper sandboxing of Python eval that fails to remove builtins, which allows an attacker to execute arbitrary operating system commands through crafted LLM-generated tool messages...
EUVD-2026-42166
Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place a malicious executable in the installation folder, which results in arbitrary code execution with SYSTEM privilege...
CVE-2026-56437
Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege...
CVE-2026-56437
The CVE-2026-56437 issue affects Pupsman versions prior to 3.9.0. An Uncontrolled search path element allows arbitrary code execution with SYSTEM privileges if a crafted DLL is placed in the same folder as the affected installer and the installer is executed. No exploitation details or fixes are ...
EUVD-2026-42120
The application contains an out-of-bounds write vulnerability that can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution...
EUVD-2026-42122
The application contains a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...
PT-2026-56520
Name of the Vulnerable Software and Affected Versions Horde Virtual File System VFS API versions prior to 3.0.1 Description The Horde Vfs Smb driver contains an OS command injection flaw where the escapeShellCommand method does not properly sanitize command substitution sequences. Authenticated...
AMD Client UEFI Firmware Security Update
AMD has informed HP of a potential security vulnerability identified in some AMD client platform firmware, which might allow arbitrary code execution. AMD is releasing firmware updates to mitigate this vulnerability. AMD has released updates to mitigate the potential vulnerability. HP has...
CVE-2026-36027
An issue in Code27 Companion Hub SQ3A.220705.003.A1 allows a physically proximate attacker to execute arbitrary code via the USB debugging ADB and Android Debug Bridge components...
The vulnerability of Sun’s console-based graphic editor ImageMagick decoder allows a hacker to execute arbitrary code.
The vulnerability of the Sun console-based graphic editor ImageMagick relates to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the MagnifyImage function in the console-based image editing tool ImageMagick, which allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the MagnifyImage function in the console-based image editing tool ImageMagick is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...
The vulnerability of the Merge() function in the Gogs automated Git repository creation tool allows a hacker to execute arbitrary code.
The vulnerability of the Merge function in the Gogs automated Git repository creation tool is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the MSL format processor in the ImageMagick console graphics editor allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the MSL format processor in the ImageMagick console-based graphics editor is related to uncontrolled recursion. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service interruptions...
Linux Distros Unpatched Vulnerability : CVE-2026-14380
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute...
RHEL 9 : nginx:1.26 (RHSA-2026:36639)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:36639 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security...
RockyLinux 8 : perl-HTTP-Daemon (RLSA-2026:36188)
The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:36188 advisory. perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in sendfile CVE-2026-8450 Tenable has extracted the preceding description block...
ROS-20260708-73-0039
The vulnerability in glibc is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ALSA-2026:36832 Important: libreoffice security update
LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...
CVE-2026-42958
The application contains a use-after-free vulnerability that can be exploited to cause memory corruption while parsing specially crafted files. This could allow an attacker to execute arbitrary code in the context of the current process...