CVE-2024-47176

CVE-2024-47176 CUPS Common UNIX Printing System is a printing system that primarily uses protocols such as IPP Internet Printing Protocol to manage print jobs and queues. On September 27, 2024, details of a remote code execution in Unix CUPS were disclosed on the internet, with the exploitation...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, exists within the Secure Simple Pairing SSP passkey handlers. It occurs when hciconn lookup and field access are performed without proper locking, allowing a connection to be freed concurrently...

CVE-2026-83542

Improper Control of Generation of Code 'Code Injection' in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to execute arbitrary code on the server by staging crafted widget XML in a multipart upload and overriding the mainDecoratorLocation used by a...

CVE-2026-68524

Apache OFBiz versions prior to 24.09.08 are vulnerable to Pre-Authentication Remote Code Execution (RCE). An unauthenticated attacker can exploit temporary-file handling and access an open file descriptor to inject a "file:" URI , forcing the application to load an attacker-controlled Screen defi...

EUVD-2026-117470

Improper Control of Generation of Code 'Code Injection' in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to execute arbitrary code on the server by staging crafted widget XML in a multipart upload and overriding the mainDecoratorLocation used by a...

CVE-2026-85627 Apache OFBiz: Authenticated Code Execution Vulnerability

Improper Neutralization of Special Elements Used in a Template Engine 'Server-Side Template Injection' in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding only a stock non-administrative account to execute arbitrary operating system commands as th...

CVE-2026-85627

Apache OFBiz versions 24.09 before 24.09.08 are vulnerable to a Server-Side Template Injection (SSTI) vulnerability. A remote authenticated attacker with a non-administrative account can execute arbitrary operating system commands as the OFBiz process user. The root cause involves the updateLayou...

Exploit for CVE-2026-109518

cve-2026-109518-apt-patch-proxmox-and-generic Silly little pat...

Security Bulletin: IBM QRadar SIEM contains PHP components with known vulnerabilities

Summary IBM QRadar SIEM contains versions of PHP vulnerable to PHP2Shell vulnerabilities. This bulletin contains mitigations for QRadar SIEM systems. Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handli...

Security update for rsyslog

This update for rsyslog fixes the following issues: CVE-2026-92709: omfile dynaFile template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution bsc1286926. RainerScript replace length wrap bsc1285036...

SUSE-SU-2026:5122-1 Security update for rsyslog

This update for rsyslog fixes the following issues: - CVE-2026-92709: omfile dynaFile template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution bsc1286926. - RainerScript replace length wrap bsc1285036...

chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page

A flaw was found in ANGLE, a graphics engine used in Google Chrome. This vulnerability, caused by improper validation of an array index, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation can occur when a user visits a specially crafted HTML...

chromium-browser: angle: Chromium-browser: Arbitrary code execution via use-after-free vulnerability in ANGLE

A flaw was found in chromium-browser. A use-after-free vulnerability in ANGLE allows a remote attacker to execute arbitrary code outside the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to a complete compromise of the affected system...

chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds read

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds read vulnerability could allow a remote attacker, who has already compromised the browser's renderer process, to potentially execute arbitrary code outside of the browser's security sandbox. This exploitation occurs when ...

chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome due to use-after-free

A flaw was found in ANGLE, a component of Google Chrome. A remote attacker who has compromised the renderer process could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the sandbox, leading t...

chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...

chromium-browser: angle: Chromium: Arbitrary code execution via buffer overflow in ANGLE

A flaw was found in Chromium's ANGLE component. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the execution of arbitrary code outside the browser's security sandbox, potentially compromising the affect...

Critical: Red Hat Security Advisory: webkit2gtk3 security, bug fix, and enhancement update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build

A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...