CVE-2026-76147 Genians, Inc Genian NAC/ZTNA Remote Code Execution

A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...

CVE-2026-76147

A path traversal (ZIP Slip) vulnerability exists in the agent upgrade feature of Genian NAC/ZTNA . The root cause is insufficient authorization and integrity verification , which allows a remote attacker to achieve remote code execution . No specific patch versions or exploit links are provided i...

EUVD-2026-90489

A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...

Exploit for CVE-2026-96349

CVE-2026-96349 — WordPress SiteSkite ≤ 2.1.8 → unauthenticated...

CLEANSTART-2024-NP33069 exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1

Security vulnerability affects the e2fsprogs package. An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1...

CLEANSTART-2024-DX96304 code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1

Security vulnerability affects the e2fsprogs package. A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1...

CLEANSTART-2026-UC89938 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite

Security vulnerability affects the apache-nifi package. Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache Calcite...

CLEANSTART-2026-RR80761 attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters

Security vulnerability affects the apache-nifi package. An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters...

CLEANSTART-2026-OK73778 SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass

Security vulnerability affects the kube-state-metrics-fips package. SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...

EUVD-2025-209814

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

EUVD-2025-209813

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

InvoicePlane 1.7.1 Configuration Injection Remote Code Execution

InvoicePlane version 1.7.1 contains a setup-module configuration injection vulnerability that can manipulate environment settings and potentially lead to remote code execution. https://packetstorm.news/download/233763...

PT-2026-104050

Name of the Vulnerable Software and Affected Versions RAGFlow version 0.24.0 Description Improper access control exists in the get dataset function within the 'api/apps/evaluation app' endpoint. This flaw allows an attacker to trigger the execution of arbitrary code or commands controlled by the...

PT-2026-103839

Name of the Vulnerable Software and Affected Versions tnef affected versions not specified Description A heap-based buffer overflow occurs in the find free number function during the generation of numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file...

Linux Distros Unpatched Vulnerability : CVE-2026-102308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the...

CVE-2026-55251: Improper Control of Generation of Code

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validation.yml runs on pullrequest and executes code supplied by the pull request before any maintainer review. Three...

Rocky Linux 9 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc Multiple Vulnerabilities (crlsa-2023_4201)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20234201 advisory. webkitgtk: memory corruption issue leading to arbitrary code execution CVE-2023-32435 webkitgtk: type confusion issue leading to arbitrary code execution...

AlmaLinux 9.2 [TuxCare] Security Update: bsdcat / bsdcpio / bsdtar / libarchive / libarchive-devel (ALMALINUX9.2:CLSA-2026:1775647149)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1775647149 advisory. - Windows libarchive Remote Code Execution Vulnerability CVE-2024-20696 Note that Nessus has not tested for this issue but has instead relied...

Linux Distros Unpatched Vulnerability : CVE-2026-19547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript...

Rocky Linux 8 [CIQ] Security Update: pg_repack / pg_repack-debuginfo / pg_repack-debugsource / pgaudit / etc Multiple Vulnerabilities (crlsa-2024_10785)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202410785 advisory. postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable chang...