CVE-2026-79393

A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote unauthenticated attackers to cause a denial of service or potentially execute arbitrary cod...

PT-2026-89889

Name of the Vulnerable Software and Affected Versions Mistral Vibe versions prior to 2.25.4-1.1 Description An arbitrary code execution issue exists where an attacker can bypass command permission checks. This is achieved by using environment variable assignments before allowlisted commands, as...

CVE-2026-87986: Improper Handling of Syntactically Invalid Structure

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed portions are omitted from inspection, enabling embedded commands to execute on the user's system without approval...

ROS-20260911-73-0073

The vulnerability in Chromium is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2026-89888

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed portions are omitted from inspection, enabling embedded commands to execute on the user's system without approval...

CVE-2026-80469: Improper Verification of Cryptographic Signature

An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution of attacker-controlled code. User interaction is required...

Ivanti Neurons for ITSM deserialization vulnerability (CNVD-2026-37870)

Ivanti Neurons for ITSM is a modern IT Service Management ITSM software developed by Ivanti Corporation. Ivanti Neurons for ITSM has a deserialization vulnerability. This vulnerability arises from improper validation of deserialized data that is not trusted. Attackers can exploit this vulnerabili...

ROS-20260911-73-0100

The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Ivanti Neurons for ITSM has a missing authorization vulnerability

Ivanti Neurons for ITSM is a modern IT Service Management ITSM software developed by Ivanti Corporation. Ivanti Neurons for ITSM has a missing authorization vulnerability; this vulnerability arises from incorrect user authorization verification. Attackers can exploit this vulnerability to execute...

Linux Distros Unpatched Vulnerability : CVE-2026-71614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/mediatools/dvbmpe.c,...

AlmaLinux 9 : vim (ALSA-2026:66366)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:66366 advisory. vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Service via...

netrw Plugin RCE

The vulnerability of the netrw text editor plugin in Vim is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vim Code Execution

The vulnerability of the vmsfixfilename function in the Vim/src/osvms.c file of the Vim text editor is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

C omni-completion module Code Execution

The vulnerability of the C omni-completion mechanism in the runtime/autoload/ccomplete.vim text editor Vim is related to improper code generation control. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

python3complete.vim Code Execution

The vulnerability of the PHP code autocompletion mechanism in the Python omni-completion module python3complete.vim text editor Vim is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Python omni-completion module autoload Code Execution

The vulnerability of the Python omni-completion module’s autoload mechanism, located in the runtime/autoload/python3complete.vim file, is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Vim omni-completion Code Execution

The vulnerability of the Python omni-completion mechanisms for runtime/autoload/pythoncomplete.vim and runtime/autoload/python3complete.vim in the Vim text editor involves the integration of functionality from an unreliable source. Exploiting this vulnerability allows a remote attacker to execute...

Debian dsa-6493 : libevent-2.1-7t64 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6493 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6493-1 [email protected] https://www.debian.org/securit...

RHEL 9 : nginx (RHSA-2026:66542)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:66542 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security...

AlmaLinux 9 : nginx (ALSA-2026:66542)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66542 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the AlmaLinux...