PT-2026-63250

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.182 Description An inappropriate implementation in the WebAudio component allows a remote attacker to execute arbitrary code within a sandbox by enticing a user to visit a specially crafted HTML page...

PT-2026-61846

The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SVGFile constructor in all versions up to, and including, 8.14.0 This is due to an incorrect conditional check that prevents file validation from taking place. This makes it possible...

📄 WordPress Royal Elementor Addons 1.3.78 Unauthenticated Shell Upload

WordPress Royal Elementor Addons plugin version 1.3.78 contains an unauthenticated arbitrary file upload to remote code execution vulnerability. A remote attacker can upload executable PHP code and achieve remote code execution. This proof of concept exploit demonstrates the vulnerable request fl...

KLA91167 Multiple vulnerabilities in Oracle Java

Multiple vulnerabilities were found in Oracle Java. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability can be exploited...

Security Vulnerabilities fixed in Firefox 153 — Mozilla

Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed...

PT-2026-61923

Name of the Vulnerable Software and Affected Versions Firefox version 152 Thunderbird version 152 Description Memory safety bugs were identified that showed evidence of memory corruption. These issues could potentially be exploited to execute arbitrary code. Recommendations Update Firefox to...

KLA91164 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Security...

KLA91170 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denia...

PT-2026-61872

Name of the Vulnerable Software and Affected Versions Firefox ESR version 115.37 Firefox ESR version 140.12 Firefox version 152 Thunderbird ESR version 140.12 Thunderbird version 152 Description Memory safety bugs were identified that showed evidence of memory corruption. These issues could...

KLA91166 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in WebAudio can be exploited remotely to cause denial of...

PT-2026-63585

Name of the Vulnerable Software and Affected Versions fastjson versions 1.2.68 through 1.2.83 Description A remote code execution RCE issue exists in the fastjson library, specifically impacting Spring Boot applications. This flaw allows an unauthenticated attacker to execute arbitrary code with...

Amazon Linux 2 : libtiff, --advisory ALAS2-2026-3823 (ALAS-2026-3823)

The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3823 advisory. A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compress...

Linux Distros Unpatched Vulnerability : CVE-2026-63030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery...

MAL-2026-10990 Malicious code in ts-vitest (npm)

ts-vitest is a typosquat of vitest/ts-eslint hollow "kelly-calc"/"clob-math" content, no legitimate functionality that ships a postinstall two-stage fetch-exec dropper. The package.json declares postinstall: node scripts/install-check.cjs; the hook's resolvePeerBundleUrl fetches a JSON config fro...

CVE-2026-30631

An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 2025-09-11 allowing attackers to execute arbitrary code via crafted path to computerwritefile...

PT-2026-61970

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U affected versions not specified Description SolarWinds Serv-U contains a privilege escalation flaw that allows a group to elevate its access to system administrator levels. This can lead to arbitrary code execution with root...

CVE-2026-30631

CVE-2026-30631 affects bytebot-ai, with a root cause allowing arbitrary code execution via a crafted path to computer_write_file (commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313, 2025-09-11). The vulnerability is tracked across multiple feeds (NVD, CVE list, CVE records) and has a CVSS v3.1 base ...

PT-2026-61976

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U affected versions not specified Description Broken access control allows arbitrary file read and write operations. This flaw can be leveraged to escalate privileges and execute code as root. Exploitation requires domain...

PT-2026-61998

Name of the Vulnerable Software and Affected Versions Sourcetree for Mac and Sourcetree for Windows versions 3.4.11 through 3.4.12 Description An authenticated attacker can execute arbitrary code, which may lead to significant impacts on confidentiality, integrity, and availability. This issue...

vim security update

9.1.083-9.0.1.el102.7 - Remove upstream references Orabug: 31197557 2:9.1.083-9.7 - RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave - RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete 2:9.1.083-9.6 - RHEL-185867 CVE-2026-47167 vim: Code...