655947 matches found
Exploitation-Basic-Note-Cybersec101-
Exploitation-Basic-Note-Cybersec101- Here are my notes after f...
CVE-2026-89997
A flaw was found in the Linux kernel's device mapper dm component. A local attacker could exploit a race condition between the resume and remove input/output control ioctl operations. This could lead to a use-after-free vulnerability, potentially allowing for arbitrary code execution or denial of...
CVE-2026-90001
A flaw was found in the Linux kernel's HID Human Interface Device BPF Berkeley Packet Filter component. A race condition exists between the device destruction and BPF link release paths, which can lead to a struct hiddevice being freed twice. This double-free vulnerability results in a...
MAL-2026-17880 Malicious code in seapy-ops (PyPI)
In seapy-ops versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, and 1.1.2, an advertised local file analysis tool conceals folder collection and upload commands behind an unlock gate. Once unlocked, it recursively uploads eligible files from the working directory to a configured remote server; a hidden...
Malicious code in seapy-ops (PyPI)
In seapy-ops versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, and 1.1.2, an advertised local file analysis tool conceals folder collection and upload commands behind an unlock gate. Once unlocked, it recursively uploads eligible files from the working directory to a configured remote server; a hidden...
Exploit for Unchecked Return Value in Google Brotli
Detect · Prove reachability · Understand CVE-2026-111497 — the B...
CVE-2026-119050
Agno versions through 3.1.11 are vulnerable to Code Execution due to an unsafe reflection flaw in PandasTools . The vulnerability occurs when the application uses getattr() with model-controlled function names, allowing an attacker to invoke arbitrary pandas functions. Through prompt injection , ...
CVE-2026-119050 Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection
Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr. Attackers can use prompt injection to make the agent call pandas.readpickle on attacker-controlled pat...
CVE-2026-119050 Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection
Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr. Attackers can use prompt injection to make the agent call pandas.readpickle on attacker-controlled pat...
CVE-2026-119050
Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr. Attackers can use prompt injection to make the agent call pandas.readpickle on attacker-controlled pat...
EUVD-2026-112816
Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr. Attackers can use prompt injection to make the agent call pandas.readpickle on attacker-controlled pat...
flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systems
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
Important: Red Hat Security Advisory: flatpak security update
An update for flatpak is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
flatpak: Flatpak: Arbitrary code execution via missing symlink protection
A flaw was found in Flatpak. A malicious sandboxed application can exploit missing symlink protection during the creation and bind-mounting of app data directories. By manipulating attacker-controlled path components, a malicious symlink can redirect these directories to arbitrary locations on th...
Security Bulletin: IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability (CVE-2026-10859)
Summary IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability due to insecure deserialization of ObjectMessage payloads Vulnerability Details CVEID:CVE-2026-10859 DESCRIPTION: IBM MQ XMS .NET client could allow an authenticated attacker to execute arbitrary code on...
Security Bulletin: IBM MQ is affected by a denial of service vulnerability (CVE-2026-10572)
Summary IBM MQ has addressed a denial of service vulnerability due to a heap buffer overflow when processing MQPUT operations with malformed message options Vulnerability Details CVEID:CVE-2026-10572 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or...
Security Bulletin: IBM MQ is affected by a denial of service vulnerability (CVE-2026-10574)
Summary IBM MQ has addressed a denial of service vulnerability due to a heap buffer overflow when processing MQPUT or MQPUT1 operations with malformed message handle properties Vulnerability Details CVEID:CVE-2026-10574 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial o...
Security Bulletin: IBM MQ is affected by an arbitrary code execution vulnerability (CVE-2026-12665)
Summary IBM MQ has addressed an arbitrary code execution vulnerability due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment Vulnerability Details CVEID:CVE-2026-12665 DESCRIPTION: IBM MQ could allow a remote...
Security Bulletin: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability (CVE-2026-12356)
Summary IBM MQ Managed File Transfer has addressed an arbitrary code execution vulnerability caused by injecting malicious arguments into Ant script commands. Vulnerability Details CVEID:CVE-2026-12356 DESCRIPTION: IBM MQ Managed File Transfer could allow an authenticated user with command queue...
Security Bulletin: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability (CVE-2026-13292)
Summary IBM MQ Managed File Transfer has addressed an arbitrary code execution vulnerability Vulnerability Details CVEID:CVE-2026-13292 DESCRIPTION: IBM MQ Managed File Transfer could allow an authenticated attacker to execute arbitrary code by injecting malicious environment variables through...