RLSA-2026:90800 Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: Emacs: arbitrary code execution in Flymake mode CVE-2026-96442 For more details about the...

emacs security update

An update is available for emacs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GNU Emacs is a powerful, customizable, self-documenting text editor. It provide...

Security Bulletin: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability (CVE-2026-11724)

Summary IBM MQ Managed File Transfer has addressed an arbitrary code execution vulnerability Vulnerability Details CVEID:CVE-2026-11724 DESCRIPTION: IBM MQ could allow an authenticated attacker to execute arbitrary code on a Managed File Transfer agent host due to improper validation of metadata...

Security Bulletin: IBM MQ is affected by a denial of service vulnerability (CVE-2026-11376)

Summary IBM MQ has addressed a denial of service vulnerability Vulnerability Details CVEID:CVE-2026-11376 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow when processing subscription requests...

Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls

A flaw in Telegram for Android could be chained with two other bugs to take full control of a victim's phone through a voice call, once the victim answered, according to security startup NebuSec. The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of...

CVE-2026-103665

The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries DLLs. When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting in arbitrary code execution with...

CVE-2026-103665

The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation is vulnerable to insecure loading of Dynamic Link Libraries (DLLs) . If an attacker places a specially crafted DLL in a directory where the installer is launched, the system may load the malicious file. This can lead ...

CVE-2026-103665

The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries DLLs. When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting in arbitrary code execution with...

EUVD-2026-112752

The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries DLLs. When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting in arbitrary code execution with...

CVE-2026-97860

YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges...

EUVD-2026-112751

YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges...

CVE-2026-97860

YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges...

CVE-2026-97860

The products YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation are vulnerable to an unquoted file path issue. The software registers Windows services using paths that lack proper quotation marks, which can allow an attacker with write permissions on the system drive to execute arbitrary cod...

Security Bulletin: IBM MQ console is affected by a remote code execution and path-segment injection vulnerability (CVE-2026-14976, CVE-2026-15280)

Summary IBM MQ Console has addressed a remote code execution and path-segment injection vulnerability in WebSphere Application Server Liberty Vulnerability Details CVEID:CVE-2026-14976 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code...

CVE-2016-10033

PoC for CVE-2016-10033 RCE against WordPress 4.6 usage: ./CVE-2016-10033.py example: ./CVE-2016-10033.py http://site.com/ 1.2.3.4:4444 admin Python port +alterations of https://exploitbox.io/vuln/WordPress-Exploit-4-6-RCE-CODE-EXEC-CVE-2016-10033.html Required: Requests pip install requests I...

Exploit for Path Traversal in Fortinet Fortimail

Exploit for CVE-2026-104286 — FortiMail: Unauthenticated Arbit...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell CVE-2026-109618 & CVE-2026-109619 — Pre-Auth RCE...

Advisory ROSA-SA-2026-3320

Software: Apache HTTPD OS: ROSA-CHROME Affected versions: = apache-2.4.69-3 Unaffected versions: apache-2.4.69-3 CVE IDs: CVE-2026-63292, CVE-2026-56154, CVE-2026-56153, CVE-2026-57941, CVE-2026-59685, CVE-2026-93546 BDU ID: None CVE-Crit: HIGH CVE-DESC.: Vulnerabilities enabling root access to t...

CVE-2026-33923 Update bundle signature bypass in Guardian/CMC before 26.4.0

A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that passes signature verification but runs an unsign...

CVE-2026-88900

CVE-2026-88900 — camel-jgroups: unsafe Java deserialization of cluster messages Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the jgroups consumer Java-deserialized cluster messages with no filter. JGroupsEndpoint.createExchangeMessage — called for every message th...