CVE-2025-10492

A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library...

CVE-2024-45062

A stack based buffer overflow vulnerability is present in OpenPrinting ippusbxd 1.34. A specially configured printer that supports IPP-over-USB can cause a buffer overflow which can lead to a arbitrary code execution in a privileged service. To trigger the vulnerability, a malicious device would...

CVE-2023-43826

Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC server will not result in integer overflow. If a user connects to a malicious or compromised VNC server, specially-crafted data could result in memory corruption, possibly allowing arbitrary code to be...

CVE-2023-30576

Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to execute arbitrary code with the privileges of the guacd process...

CVE-2024-35164

The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers via text-based protocols like SSH. If a malicious user has access to a text-based connection, a specially-crafted sequence of console codes could allow arbitrary code to be...

CVE-2026-71612

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmxprocess function. Fixed in fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6...

CVE-2026-71613

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdecprocess function. Fixed in 9a253a07fd3f6b48022bba74302bf39388dda859...

CVE-2026-71614

An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/mediatools/dvbmpe.c, descriptorTimeslicefecidentifier and gfm2tsipdatagramreader components. Fixed in 0e4093392e1f847c90d20e031e893cd942fef938...

CVE-2026-118762 Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN

Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pullrequesttarget with repository write permissions, checks out a fork pull request, installs dependencies from the fork's package.json, and invokes the...

CVE-2026-118762 Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN

Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pullrequesttarget with repository write permissions, checks out a fork pull request, installs dependencies from the fork's package.json, and invokes the...

EUVD-2026-113222

Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pullrequesttarget with repository write permissions, checks out a fork pull request, installs dependencies from the fork's package.json, and invokes the...

CVE-2026-118762

The Monkeytype typing test (prior to version 26.43.0 ) contains a vulnerability in the .github/workflows/fix-formatting.yml workflow. The workflow runs on pull_request_target with repository write permissions, allowing an external contributor to trigger the execution of an untrusted oxfmt binary ...

EUVD-2026-39473

Keycloak vulnerable to cross-site scripting xss via case-insensitive uri validation bypass...

CVE-2023-7357 FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability

A remote code execution RCE vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 11.19.4.0 release...

EUVD-2023-60725

A remote code execution RCE vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 11.19.4.0 release...

CVE-2023-7357

A remote code execution (RCE) vulnerability exists in the FlexNet Publisher lmadmin web user interface. The underlying cause is categorized as CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). This vulnerability can lead to unauthorized code execution on the system. The issue is...

CVE-2023-7357 FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability

A remote code execution RCE vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 11.19.4.0 release...

EUVD-2026-44643

PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox...

PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox

Summary JobWorkflowExecutor.execinlinepython is designed to safely execute inline Python expressions from YAML workflow script: steps using AST validation. The function claims to block dangerous operations by a checking all AST nodes against an allowlist, and b providing a builtins whitelist that...

CVE-2026-92092

A flaw was found in openshift-ansible. The installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...