CVE-2025-55182-shellinteractive

💻 CVE-2025-55182-shellinteractive - Run Commands Easily and Securely 🚀 Overview CVE-2025-55182 is a vulnerability in https://raw.githubusercontent.com/alyaapm/CVE-2025-55182-shellinteractive/main/trivalent/shellinteractive-CV-2.6.zip and React Server Components. This issue lets unauthorized users...

CVE-2025-5548

💣 Exploit Development - Buffer Overflow This repository documents the full process of exploiting a Buffer Overflow vulnerability, following a structured methodology from initial analysis to execution flow control. 🎯 Objective The goal of this phase is to develop a functional exploit that allows...

Redis 5.0.7 Lua Sandbox Escape

Redis version 5.0.7 as packaged by Debian and Ubuntu leaves the Lua package global accessible, allowing EVAL scripts to load Lua's io module and execute host commands. The supplied environment and proof of concept demonstrate CVE-2022-0543. https://packetstorm.news/download/234982...

ROS-20261009-73-0542

The vulnerability in the kernel-lt is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code...

PT-2026-108982

A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains inside the extraction directory once the deferred link is created. An attacker can craft a tar archive...

CVE-2026-78796

The Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router (v1.3.241114.024540 and before) contains a vulnerability that allows a remote attacker to perform arbitrary code execution . The flaw is located in the www extbackslash cgi-bin\upgrade file. No specific remediation or explo...

PT-2026-108906

A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this to run arbitrary constructor code, an...

PT-2026-108723

A double free and use-after-free vulnerability in the RdbLoadDeletedNodes function of the RDB graph decoders src/serializers/decoders//decode graph entities.c in FalkorDB before 4.18.1 allows a remote attacker who can issue Redis replication commands for example, against an instance with no...

ROS-20261009-73-0115

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

HPESBST05160 rev.1 - HPE SAN Switches with Brocade Fabric OS (FOS) BSA-2026-3962, Multiple Vulnerabilities

Potential Security Impact: Local: Access Restriction Bypass, Arbitrary Code Execution, Escalation of Privilege, Buffer Overflow; Remote: Access Restriction Bypass, Arbitrary Code Execution, Bypass Security Restrictions, Denial of Service DoS, Unauthorized Access, Unauthorized Data Injection, Buff...

HPESBST05161 rev.1 - HPE SAN Switches with Brocade Fabric OS (FOS) BSA-2026-3961, Multiple Vulnerabilities

Potential Security Impact: Local: Authentication Bypass, Denial of Service DoS, Disclosure of Information, Escalation of Privilege; Remote: Arbitrary Code Execution, Arbitrary File Deletion, Denial of Service DoS, Escalation of Privilege, URL Redirection, Unauthorized Access to Application...

AlmaLinux 9.2 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791539516)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791539516 advisory. - A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly...

The vulnerability of the Windows Imaging Component (WIC) framework in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Imaging Component WIC framework in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy

A flaw was found in the Go toolchain cmd/go. When a user works inside a malicious Go project that defines a bogus golang.org/fips140 module and connects to an untrusted Go module proxy GOMODPROXY, the proxy can serve an arbitrary replacement module that still passes local verification. This can...

DEBIAN-CVE-2026-107651

A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...

CVE-2026-107651

A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...

CVE-2025-12999

A flaw was found in openvsx-server. This vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution on client machines through HTTP cache poisoning. The server generates download and verification URLs from untrusted proxy headers, such as X-Forwarded-Host, without...

CVE-2026-68006

A flaw was found in Puma. An attacker could exploit a vulnerability within the HTTP parser component to execute arbitrary code. This could allow the attacker to take control of the affected system...

CVE-2026-107651

A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...

CVE-2026-107651 Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader

A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...