Apache Camel FTP 4.22.0 Path Traversal

Apache Camel FTP versions from 4.0.0 before 4.18.5 and from 4.19.0 before 4.22.1 contain a path traversal vulnerability. This proof of concept uses a malicious directory listing to demonstrate access to a file outside the configured polling directory. https://packetstorm.news/download/236116...

CVE-2026-111854: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access...

CVE-2026-92798: Improper Control of Generation of Code

The User Registration & Membership plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 5.2.8 This is due to insufficient input sanitization in the 'referrerurl' branch of URSmartTags::process, where the attacker-controlled HTTPREFERER header is on...

NoMachine Redis Improper Authentication Local Privilege Escalation

NoMachine contains an improper authentication vulnerability in its Redis component that allows local attackers to escalate privileges and execute arbitrary code in the service account context...

Linux Distros Unpatched Vulnerability : CVE-2026-81839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain...

ExifTool 12.23 Arbitrary Code Execution

ExifTool versions 7.44 through 12.23 contain an arbitrary code execution vulnerability in DjVu processing. This proof of concept creates a JPEG embedding a crafted DjVu payload that executes a specified command when processed. https://packetstorm.news/download/236124...

AlmaLinux 9.6 [TuxCare] Security Update: gvfs / gvfs-client / gvfs-devel / gvfs-fuse / gvfs-goa / etc (ALMALINUX9.6:CLSA-2026:1792194238)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792194238 advisory. - A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to...

AlmaLinux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792215398)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792215398 advisory. - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224. CVE-2022-2874 - Use After Free in GitHub repository vim/v...

Rocky Linux 8 [CIQ] Security Update: lrzsz / lrzsz-debuginfo / lrzsz-debugsource Multiple Vulnerabilities (crlsa-2026_83525)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202683525 advisory. lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode CVE-2026-105840 lrzsz: lrzsz: Arbitrary command execution via crafte...

Rocky Linux 9.6 [TuxCare] Security Update: gvfs / gvfs-client / gvfs-devel / gvfs-fuse / gvfs-goa / etc (ALMALINUX9.6:CLSA-2026:1792194238)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792194238 advisory. - A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to...

Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792215398)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792215398 advisory. - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224. CVE-2022-2874 - Use After Free in GitHub repository...

Linux Distros Unpatched Vulnerability : CVE-2026-111458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The fanxfingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792217772)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792217772 advisory. - vim is vulnerable to Use After Free CVE-2021-4187 - Vim is an open source, command line text editor. Prior to 9.2.0479, a command...

Linux Distros Unpatched Vulnerability : CVE-2026-102946

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.4,...

AlmaLinux 9.2 [TuxCare] Security Update: gvfs / gvfs-client / gvfs-devel / gvfs-fuse / gvfs-goa / etc (ALMALINUX9.2:CLSA-2026:1792186767)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792186767 advisory. - A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to...

CentOS Linux 8.4 [TuxCare] Security Update: dovecot / dovecot-devel / dovecot-mysql / dovecot-pgsql / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1792238249)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1792238249 advisory. - An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME...

Linux Distros Unpatched Vulnerability : CVE-2026-111802

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying wheth...

Linux Distros Unpatched Vulnerability : CVE-2026-95121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType in src/atomrtp.cpp. A specially crafted MP4 file can cause...

Linux Distros Unpatched Vulnerability : CVE-2026-30971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.39.2, 1.38.2, and 1.36.40, ZoneMinder interpolates an unvalidated...

AlmaLinux 9.2 [TuxCare] Security Update: flatpak / flatpak-devel / flatpak-libs / flatpak-selinux / etc (ALMALINUX9.2:CLSA-2026:1792190438)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792190438 advisory. - A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via...