Linux Distros Unpatched Vulnerability : CVE-2026-120208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in uncdecodermixedinterleave::processTile that allows attackers to write out of...

CentOS Linux 6 [TuxCare] Security Update: icu / libicu / libicu-devel / libicu-doc (CENTOS6:CLSA-2026:1793167763)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793167763 advisory. - A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed a...

ASB-A-496614216

In pngsettRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

SUSE SLED15: libbrotli-devel / libbrotlicommon1 / libbrotlicommon1-32bit / etc (SUSE-SU-2026:4945-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4945-1 advisory. This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote...

PUB-A-508703594

In EncodeT140 of TextRtpPayloadEncoderNode.cpp, there is a possible Heap Buffer Overflow due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-493831486

In multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-517376690

In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-541987664

In multiple functions of rmmiutility.c, there is a possible way to trigger an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-530002430

In GetTwiddledMiptreeSparsePageMap of texmgmt.c, there is a possible way to trigger an out of bounds write due to a logic error. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

F5 BIG-IP TMUI Remote Code Execution

F5 BIG-IP TMUI contains an unauthenticated remote code execution and local file inclusion vulnerability. This proof of concept can check a target, read target files, execute TMUI commands, and enumerate common target files. https://packetstorm.news/download/238764...

WordPress Gravity Forms 3.1.2 PHP Object Injection

WordPress Gravity Forms version 3.1.2 and prior contain an unauthenticated PHP object injection vulnerability in Post Custom Field List inputs with content templates enabled. The included proof of concept identifies forms and fields and submits a supplied serialized payload...

Apache Struts 2 Core 7.4.0 OGNL Code Execution

Apache Struts 2 Core version 7.4.0 and below contain an OGNL security-bypass issue that can allow nested reflective calls to execute arbitrary code where attacker-controlled input is evaluated as OGNL. Description Apache Struts2 Core version 7.4.0 and below attempt to prevent arbitrary code...

PT-2026-135055

A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part of the component Find Command Handler. The manipulation of the argument -exec results in os command injection. The attack may be performed from remote. The vendor was contacted...

Joern 4.0.670

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

PHP 7.4 FPM Docker Image

This Docker build creates a PHP FPM image based on PHP version 7.4 with the PHP source backport for two remote code execution vulnerabilities...

openSUSE 16 Security Update : ansible-core (openSUSE-SU-2026:22172-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22172-1 advisory. - CVE-2026-89091: an attacker can get a victim to install a malicious collection to overwrite arbitrary files with the privileges of the user running...

CVE-2026-120275: Shanghai Xi Yu Ji Zhi Technology Minimax Code: A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8

A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part of the component Find Command Handler. The manipulation of the argument -exec results in os command injection. The attack may be performed from remote. The vendor was contacted...

MiracleLinux 9 : libXrender-0.9.10-16.el9_8.2 (AXSA:2026-2219:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2219:02 advisory. libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats CVE-2026-88807 Tenable has extracted the preceding description block...

Beecue FastBee input validation error vulnerability

Beecue FastBee versions 2.1.0 and earlier contain a security vulnerability. This vulnerability stems from code injection in the /iot/script file functionality of the Groovy Script Executor component, allowing attackers to remotely execute code...

PT-2026-134919

Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process because the gcloud-auth login callback does not check the OAuth state. The gcloud-auth login and application-default login commands send a state parameter with the authorization request, then...