Oracle Linux 10 : nginx (ELSA-2026-36364)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36364 advisory. - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-420...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2765)

According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in...

Security update for vim (important)

openSUSE security update: security update for vim ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21374-1 Rating: important References: bsc1271193 bsc1271194 bsc1271195 Cross-References: CVE-2026-59856 CVE-2026-59857 CVE-2026-59858 CVSS scores:...

hplip security update

3.23.12-10.5 - RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 3.23.12-10.4 - Fix more leaks in hpcups 3.23.12-10.3 - OSH fixes after CVE-2026-8631 3.23.12-10.2 - CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via integer overflow in hpcups 3.23.12-10.1 ...

PT-2026-63250

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.182 Description An inappropriate implementation in the WebAudio component allows a remote attacker to execute arbitrary code within a sandbox by enticing a user to visit a specially crafted HTML page...

PT-2026-61923

Name of the Vulnerable Software and Affected Versions Firefox version 152 Thunderbird version 152 Description Memory safety bugs were identified that showed evidence of memory corruption. These issues could potentially be exploited to execute arbitrary code. Recommendations Update Firefox to...

PT-2026-61846

The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SVGFile constructor in all versions up to, and including, 8.14.0 This is due to an incorrect conditional check that prevents file validation from taking place. This makes it possible...

PT-2026-62109

A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authenticated remote attacker to perform command injection on certain CLI commands. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

📄 WordPress Royal Elementor Addons 1.3.78 Unauthenticated Shell Upload

WordPress Royal Elementor Addons plugin version 1.3.78 contains an unauthenticated arbitrary file upload to remote code execution vulnerability. A remote attacker can upload executable PHP code and achieve remote code execution. This proof of concept exploit demonstrates the vulnerable request fl...

KLA91167 Multiple vulnerabilities in Oracle Java

Multiple vulnerabilities were found in Oracle Java. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability can be exploited...

ASUS Router Command Injection Vulnerability (CNVD-2026-30681)

ASUS Router is the router firmware and management system from ASUS, used for network connection configuration and device management. The ASUS Router has a command injection vulnerability. This vulnerability arises due to improper validation of the integrity check value and certificate verificatio...

PT-2026-62073

Name of the Vulnerable Software and Affected Versions bytebot-ai affected versions not specified Description An issue allows attackers to execute arbitrary code by providing a crafted path to the computer write file function. Recommendations At the moment, there is no information about a newer...

Amazon Linux 2 : libtiff, --advisory ALAS2-2026-3823 (ALAS-2026-3823)

The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3823 advisory. A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compress...

MiracleLinux 8 : vim-8.0.1763-27.el8_10.ML.1 (AXSA:2026-1312:17)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1312:17 advisory. vim: command injection when decompressing .tgz archives CVE-2026-46483 vim: Vim: Arbitrary Code Execution via crafted directory names CVE-2026-47162...

CVE-2026-30631

An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 2025-09-11 allowing attackers to execute arbitrary code via crafted path to computerwritefile...

Security Vulnerabilities fixed in Firefox ESR 140.13 — Mozilla

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. Memory safety bugs present in Firefox ESR 140.12 and...

CVE-2026-30631

CVE-2026-30631 affects bytebot-ai, with a root cause allowing arbitrary code execution via a crafted path to computer_write_file (commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313, 2025-09-11). The vulnerability is tracked across multiple feeds (NVD, CVE list, CVE records) and has a CVSS v3.1 base ...

PT-2026-61950

A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users...

PT-2026-63318

Name of the Vulnerable Software and Affected Versions AccountsService versions prior to 23.13.9-8ubuntu7 Description An Ubuntu-specific patch in the SetLanguage function only partially drops privileges before launching language helper scripts. While the effective UID/GID is changed to the target...

📄 WordPress Salon Booking System 9.5 Unauthenticated Shell Upload

WordPress Salon Booking System plugin version 9.5 contains an unauthenticated arbitrary file upload to remote code execution vulnerability. A remote attacker can upload executable PHP code and achieve remote code execution. This proof of concept exploit demonstrates the vulnerable request flow...