[SECURITY] [DLA 4812-1] libio-compress-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4812-1 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout October 02, 2026 https://wiki.debian.org/LTS -...

CVE-2026-103484

A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...

CVE-2026-63292

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...

CVE-2025-55182-shellinteractive

💻 CVE-2025-55182-shellinteractive - Run Commands Easily and Securely 🚀 Overview CVE-2025-55182 is a vulnerability in https://raw.githubusercontent.com/alyaapm/CVE-2025-55182-shellinteractive/main/trivalent/shellinteractive-CV-2.6.zip and React Server Components. This issue lets unauthorized users...

CVE-2025-5548

💣 Exploit Development - 버퍼 오버플로우 이 저장소는 초기 분석부터 실행 흐름 제어까지 구조화된 방법론을 따라 버퍼 오버플로우 유형의 취약점을 악용하는 전체 프로세스를 문서화합니다. 🎯 목표 이 단계의 목표는 취약한 프로그램의 실행 흐름을 리디렉션하고 임의 코드 실행을 위한 기반을 마련하는 기능적 익스플로잇을 개발하는 것입니다. 🧭 악용 방법론 다음은 프로세스 중 수행된 단계를 자세히 설명합니다. 🔍 1단계 - 바이너리 정적 분석 IDA Free 리버스 엔지니어링 도구를 사용한 바이너리 분석을 통해 다음을...

FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway

A flaw was found in FreeRDP. FreeRDP clients using TS Gateway are vulnerable to a heap-buffer-overflow. A malicious gateway can send a specially crafted response fragment, causing the client to write beyond its allocated buffer. This can lead to a client crash, resulting in a Denial of Service Do...

PT-2026-104096

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

Linux Distros Unpatched Vulnerability : CVE-2026-103484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution. CVE-2026-103484 Not...

Google Chrome < 154.0.8037.97 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 154.0.8037.97. It is, therefore, affected by multiple vulnerabilities as referenced in the 202610stable-channel-update-for-desktop advisory. - Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remo...

Red Hat: CVE-2026-94422: xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

Debian dla-4812 : libio-compress-perl - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4812 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4812-1 [email protected]...

ROS-20261002-73-0031

The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

ROS-20261002-73-0034

The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

ROS-20261002-73-0145

The vulnerability in Sogo is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-104095

Name of the Vulnerable Software and Affected Versions WHM affected versions not specified Description A stored Cross-Site Scripting XSS issue exists in the Manage SSL Hosts interface. This flaw allows an attacker with low privileges to execute arbitrary code, potentially impacting confidentiality...

openSUSE 16: helm / helm-bash-completion / helm-fish-completion / etc (openSUSE-SU-2026:21983-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21983-1 advisory. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. - CVE-2026-35204:...

SUSE SLES12 Security Update : python-PyYAML (SUSE-SU-2026:4402-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4402-1 advisory. - Update to 5.3.1. - CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code...

Fedora 45 : 0ad / GAPDoc / GConf2 / GraphicsMagick / ImageMagick / Io-language / etc (2026-91259c13b9)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-91259c13b9 advisory. libxml2 updated to version 2.15.4, compat libxml22.13 added, and rebuilds of packages linking to libxml2. Packages that FTBFS will require the compa...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Django vulnerabilities (USN-8848-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8848-1 advisory. Bence Nagy discovered that GeoDjango in Django incorrectly handled spatial lookup...

ROS-20261002-73-0021

The vulnerability of the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...