EUVD-2026-63694

TREK is a collaborative travel planner. Prior to 3.1.0, when the Journey add-on is enabled, TREK interpolates the unescaped activeSuggestion.title value into journey.frontpage.suggestionText through client/src/i18n/TranslationContext.tsx and renders the result with dangerouslySetInnerHTML in...

CVE-2026-54505 TREK: Stored cross-user HTML injection via trip title in the Journey suggestion banner

TREK is a collaborative travel planner. Prior to 3.1.0, when the Journey add-on is enabled, TREK interpolates the unescaped activeSuggestion.title value into journey.frontpage.suggestionText through client/src/i18n/TranslationContext.tsx and renders the result with dangerouslySetInnerHTML in...

CVE-2026-69836 Microsoft Entra ID Remote Code Execution Vulnerability

...

CVE-2026-69836 Microsoft Entra ID Remote Code Execution Vulnerability

...

CVE-2026-69836

CVE-2026-69836 is a CVSS 10.0 (Critical) deserialization of untrusted data vulnerability in Microsoft Entra ID (formerly Azure Active Directory), enabling an unauthorized attacker to achieve remote code execution over a network with no privileges or user interaction required. The vulnerability wa...

[SECURITY] [DSA 6455-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6455-1 [email protected] https://www.debian.org/security/ Andres Salomon August 20, 2026 https://www.debian.org/security/faq -...

pwnos2-linux-web-pentest

PwnOS2 Linux Web Pentest Authorized penetration-testing case...

GHSA-8R62-W5WH-FC5M Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)

Summary The cross-site WebSocket hijacking fix was reimplemented as an origin check gated on a raw-URI prefix test, but Go's ServeMux routes on the percent-decoded path, so requesting /%61pi/events reaches the WebSocket handler while skipping the only origin control, and the upgrader itself accep...

Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)

Summary The cross-site WebSocket hijacking fix was reimplemented as an origin check gated on a raw-URI prefix test, but Go's ServeMux routes on the percent-decoded path, so requesting /%61pi/events reaches the WebSocket handler while skipping the only origin control, and the upgrader itself accep...

CVE-2026-16945 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-16945

CVE-2026-16945 is a stack-based buffer overflow in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a local attacker with low privileges to execute arbitrary code. The CVSS 3.1 score is 7.8 (HIGH) with full impact on confidentiality, integrity, and availability. No user interaction is requir...

CVE-2026-16944 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-16944

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a stack-based buffer overflow exploitable by a local attacker with high privileges to execute arbitrary code, yielding HIGH confidentiality, integrity, and availability impact (CVSS 6.7). No patch version or in-the-wild exploitation details are provide...

CVE-2026-16944 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-16943 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-16943 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-16943

IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 are affected by a heap-based buffer overflow (CWE-787) exploitable by a local attacker with high privileges to execute arbitrary code (CVSS 8.2 HIGH, scope changed). Fixes are available via AIX SP13/TL-specific service packs and VIOS Fix Packs (4.1.0.50, 4.1....

EUVD-2026-63673

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...

CVE-2026-55893

Capstone (a disassembly framework) versions 6.0.0-Alpha9 and earlier contain a heap buffer overflow in the SH architecture disassembler (arch/SH/SHDisassembler.c). The SH floating-point decoders (opFADD, opFMUL, opFSUB) call set_reg() and set_reg_n() using sh_info.op.op_count without bounds-check...

CVE-2026-55893 Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...