PT-2026-123114

A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require once of the file dede/update guide.php. This manipulation of the argument vtime causes code injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and cou...

PT-2026-122954

CVE-2026-429016 RCE remote cum execution found! ! ! guys update your balls before it's too late!...

PT-2026-123056

A vulnerability was found in Alfresco Activiti up to 7.21.0-rc.692. Affected by this issue is the function JuelScriptEngine.eval of the file JuelScriptEngine.java. Performing a manipulation results in code injection. The attack can be initiated remotely. The vendor was contacted early about this...

Red Hat: CVE-2026-116140: ImageMagick: ImageMagick: Security policy bypass via flawed delegate invocation parsing

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. An attacker who gets ImageMagick to process input that triggers a delegate invocation can bypass the administrator-defined policy and...

PT-2026-122981

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. An attacker who gets ImageMagick to process input that triggers a delegate invocation can bypass the administrator-defined policy and...

CyberDual: AI Attackers Versus AI Code Reviewers in Real Software Maintenance

Open-source projects now let AI agents review incoming code, but the code under review may itself come from an AI attacker. We present CyberDual, an arena for this dual role of AI: attacker agents hide an exploitable bug in real maintenance work on widely used open-source projects, and reviewer...

Red Hat: CVE-2026-116153: ImageMagick: ImageMagick: Denial of Service via heap-based buffer overflow in convex-hull calculations

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes...

PT-2026-122994

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes...

Amazon Linux 2023 : ghostscript, ghostscript-gtk, ghostscript-tools-dvipdf (ALAS2023-2026-3294)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3294 advisory. A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the...

KLA91368 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability can be exploited to cause denial of service. 2. An...

FreeBSD : Node.js -- multiple vulnerabilities (33a752ba-4cbe-46d8-abda-587011d90575)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 33a752ba-4cbe-46d8-abda-587011d90575 advisory. Node.js reports: dns.resolve truncates names containing NUL char CVE-2026-105482 - high TLS...

Amazon Linux 2023 : mariadb118, mariadb118-backup, mariadb118-client-utils (ALAS2023-2026-3287)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3287 advisory. MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account...

PHP 8.5.11 out of Memory Remote Code Execution

PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain an out-of-memory handling flaw that can leave request memory in an invalid state. This proof of concept compares affected and fixed builds. https://packetstorm.news/download/237484...

PHP 8.4.27 Session Upload Progress Remote Code Execution

PHP version 8.4.27 and earlier contain a session upload-progress serialization handler mismatch that can allow pre-auth object injection and remote code execution when application code changes the session serialization handler before sessionstart. https://packetstorm.news/download/237461...

Google Brotli 1.2.0 Out-Of-Bounds Write

This proof of concept demonstrates an out-of-bounds write in Google Brotli version 1.2.0 caused by malformed block-switch handling. https://packetstorm.news/download/237483...

Next.js 16.4.0 use cache Typed Array Remote Code Execution

Next.js version 16.4.0 use cache functions returning multiple typed arrays contain a React Flight framing flaw that can permit unauthenticated remote code execution. The proof of concept demonstrates affected and fixed versions. https://packetstorm.news/download/237482...

n8n 2.36.1 Git Node Remote Code Execution

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. A repository-local Git content-filter configuration can execute a command during a Git operation. https://packetstorm.news/download/237473...

n8n 2.38.1 Expression Sandbox Escape

n8n versions prior to 1.123.76, versions 2.0.0 through 2.37.6, and versions 2.38.0 through 2.38.1 contain an expression sandbox escape that can lead to code execution by an authenticated workflow editor. https://packetstorm.news/download/237472...

Pillow 12.3.0 Ghostscript Argument Injection

Pillow versions 2.6.0 through 12.3.0 contain an argument injection issue in Ghostscript EPS rendering. This proof of concept demonstrates the issue using a harmless Ghostscript help option. https://packetstorm.news/download/237469...

PHP 8.5.11 Remote Code Execution

PHP versions through 8.5.11 contain out-of-memory handling and use-after-free flaws that can allow unauthenticated remote code execution. This proof of concept demonstrates an HTTP-only exploit chain against PHP version 8.4.26 running under Apache modphp. https://packetstorm.news/download/237463...