CVE-2026-93467

The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content...

[SECURITY] [DLA 4784-1] nginx security update

Debian LTS Advisory DLA-4784-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara September 17, 2026 https://wiki.debian.org/LTS Package : nginx Version : 1.22.1-9+deb12u10 CVE ID : CVE-2026-42533 CVE-2026-56434 CVE-2026-60005 Multiple vulnerabilities wer...

CVE-2026-93467 HGiga｜OAKlouds - Insecure Deserialization

The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content...

EUVD-2026-82641

The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content...

CVE-2026-93467 HGiga｜OAKlouds - Insecure Deserialization

The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content...

CVE-2026-93467

CVE-2026-93467 affects OAKlouds , developed by HGiga . The vulnerability is an Insecure Deserialization flaw that allows unauthenticated remote attackers to achieve arbitrary code execution on the server by sending maliciously crafted serialized content. The assigned CVSS 3.1 score is 9.8 (CRITIC...

Malicious code in @lekzo/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5caafea4a5656343feb4b52bf0007c98e6ed65a41ad22c79f24c0f1c48566f package.json declares the libsignal dependency as github:canove/libsignal-node — a bare GitHub owner/repo reference with no commit SHA, tag, or semve...

MAL-2026-16276 Malicious code in @lekzo/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5caafea4a5656343feb4b52bf0007c98e6ed65a41ad22c79f24c0f1c48566f package.json declares the libsignal dependency as github:canove/libsignal-node — a bare GitHub owner/repo reference with no commit SHA, tag, or semve...

CVE-2026-81305: Inclusion of Functionality from Untrusted Control Sphere

CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device could supply a malicious script and execute arbitrary code in the security context of the affected device...

CVE-2026-81944: Stack-based Buffer Overflow

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote authenticated attacker to cause a denial of...

CVE-2026-84992: Improper Neutralization of Input During Web Page Generation

md-editor-v3 is a Markdown editor for Vue 3 developed in JSX and TypeScript. Prior to 6.5.4, MdPreview's useMarkdownIt highlight callback in packages/MdEditor/layouts/Content/composition/useMarkdownIt.ts inserts a fenced-code language value into class and language HTML attributes without escaping...

CVE-2026-79294

Cross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arbitrary code via the HTML artifact Preview rendering; public Share view component...

CVE-2026-81945: Stack-based Buffer Overflow

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions bfore 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote administrator to cause a denial of service or...

CVE-2026-7006: Download of Code Without Integrity Check

Sublime Text for Windows through Build 4192 Sublime Text 4 and Build 3207 Sublime Text 3 contains a local privilege escalation vulnerability that allows unprivileged local attackers to execute arbitrary code with elevated privileges by abusing the update staging mechanism. Attackers can place a...

Linux Distros Unpatched Vulnerability : CVE-2026-93372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a...

The vulnerability of the ColdFusion software platform, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the fromVirtualSer() function in Tenda F453 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the fromVirtualSer function in Tenda F453 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the fromNatlimit() function in Tenda F453 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the fromNatlimit function in Tenda F453 router microprogramming software is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the WrlclientSet(/goform/WrlclientSet) function in the Tenda FH1201 router software allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the WrlclientSet/goform/WrlclientSet function in the Tenda FH1201 router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

The vulnerability of the fromexeCommand() function in the Tenda F456 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromexeCommand function in the Tenda F456 router’s microprogramming system is related to the execution of an operation outside the buffer in memory when processing the cmdinput parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or...