252552 matches found
ROS-20261009-73-0115
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261009-73-0106
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261009-73-0091
The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
PT-2026-108723
Name of the Vulnerable Software and Affected Versions FalkorDB versions prior to 4.18.1 Description A double free and use-after-free issue exists in the RdbLoadDeletedNodes function of the RDB graph decoders. A remote attacker capable of issuing Redis replication commands can trigger a denial of...
PT-2026-108906
A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this to run arbitrary constructor code, an...
Redis 5.0.7 Lua Sandbox Escape
Redis version 5.0.7 as packaged by Debian and Ubuntu leaves the Lua package global accessible, allowing EVAL scripts to load Lua's io module and execute host commands. The supplied environment and proof of concept demonstrate CVE-2022-0543. https://packetstorm.news/download/234982...
Spring Data Commons 2.0.5 SpEL Injection
Spring Data Commons version 2.0.5 contains a SpEL injection issue in web data binding that can allow crafted request parameter names to execute commands. This proof of concept provides a vulnerable containerized application and demonstration. https://packetstorm.news/download/234975...
Spring Cloud Function 3.2.2 SpEL Injection
Spring Cloud Function version 3.2.2 evaluates the spring.cloud.function.routing-expression request header as a SpEL expression. The supplied proof of concept demonstrates target-side command execution. https://packetstorm.news/download/234973...
PT-2026-108982
Name of the Vulnerable Software and Affected Versions busybox affected versions not specified Description The tar applet contains a flaw in its deferred link-creation handling for symlink and hardlink entries with unsafe targets. The software fails to validate that the resolved destination remain...
PT-2026-109323
Name of the Vulnerable Software and Affected Versions Aegisub versions 3.2.0 through 3.4.2 Description Aegisub automatically loads Automation scripts referenced by the Automation Scripts metadata in ASS subtitle projects without verifying user trust in the scripts or their authors. This allows an...
Linux Distros Unpatched Vulnerability : CVE-2026-107726
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of dat...
Linux Distros Unpatched Vulnerability : CVE-2026-107725
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization chec...
CVE-2026-92705: Improper Neutralization of Null Byte or NUL Character
Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...
CVE-2026-78797: Improper Control of Generation of Code
An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary code via the taskid in tasks-lib.lua...
CVE-2026-108119: Improper Link Resolution Before File Access
A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains inside the extraction directory once the deferred link is created. An attacker can craft a tar archive...
CVE-2026-19575: Access of Resource Using Incompatible Type
The user-mode verification handler for the devicedeinit system call, zvrfydevicedeinit in kernel/device.c, validated its dev argument with KSYSCALLOBJINITdev, KOBJANY. kobjectvalidate short-circuits its type comparison when the requested type is KOBJANY, so the check reduced to "this pointer is t...
CVE-2026-7827: Stack-based Buffer Overflow
A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...
PT-2026-117594
CHIRP — Arbitrary Code Execution via eval in Kenwood ITM Driver...
Windows Imaging Component Code Execution
The vulnerability of the Windows Imaging Component WIC framework in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Cisco NX-OS NGOAM Protocol Code Execution
The vulnerability of the NGOAM protocol implementation in the Cisco NX-OS operating system for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series devices lies in the fact that operation data is written outside of the buffer in memory. Exploiting this vulnerability allows a malicious act...