CVE-2026-93029

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface...

CVE-2026-93697

A stored XSS vulnerability exists in the WHM Mass Modify Accounts interface, potentially allowing for arbitrary code execution . The vulnerability is characterized by a CRITICAL base severity score of 9.0, where an attacker with low privileges can achieve high impact on confidentiality, integrity...

CVE-2026-93697

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

EUVD-2026-91199

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

CVE-2026-93697

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

[SECURITY] [DLA 4812-1] libio-compress-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4812-1 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout October 02, 2026 https://wiki.debian.org/LTS -...

CVE-2026-103484

A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...

CVE-2026-63292

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...

FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway

A flaw was found in FreeRDP. FreeRDP clients using TS Gateway are vulnerable to a heap-buffer-overflow. A malicious gateway can send a specially crafted response fragment, causing the client to write beyond its allocated buffer. This can lead to a client crash, resulting in a Denial of Service Do...

CVE-2026-103630: Use After Free

Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84411: Integer Underflow (Wrap or Wraparound)

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of...

CVE-2026-59667: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTamano” parameter is affected – endpoint “/es/companysizemployees/update”...

CVE-2026-59661: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomRuta” parameter is affected – endpoint “/es/routes/update/693”...

CVE-2026-95662: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomCompetidor” parameter is affected – endpoint “/es/competitors/store”...

PT-2026-104192

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomMotivo” parameter is affected – endpoint “/es/lostmotives/store”...

CVE-2026-93029: Improper Neutralization of Input During Web Page Generation

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface...

PT-2026-104173

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomGrupoEmpresarial” parameter is affected – endpoint "/es/corporategroups/update/246”...

PT-2026-104174

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTipoCli” parameter is affected – endpoint “/es/clientypes/update/109441”...

ROS-20261002-73-0038

The vulnerability of the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2026-104095

Name of the Vulnerable Software and Affected Versions WHM affected versions not specified Description A stored Cross-Site Scripting XSS issue exists in the Manage SSL Hosts interface. This flaw allows an attacker with low privileges to execute arbitrary code, potentially impacting confidentiality...