VulnCheck KEV: CVE-2026-28177

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Code Atlantic LLC Popup Maker popup-maker allows DOM-Based XSS.This issue affects Popup Maker: from n/a through 1.23.0...

VulnCheck KEV: CVE-2026-82187

The Web to Print Online Designer WordPress plugin before 2.15.0 does not validate the type or extension of uploaded files, and hands the token protecting those uploads to any visitor who asks for it, allowing unauthenticated attackers to upload arbitrary files, including PHP ones, and run code on...

ROS-20261026-73-0207

The vulnerability in rabbitmq-server relates to the lack of origin verification in websockets. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted file...

PT-2026-123189

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::CheckSymbolMacroParam. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

PT-2026-125329

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Parsing a file may lead to an unexpected app termination or arbitrary code execution...

PT-2026-125505

Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability...

MiracleLinux 8 : dotnet9.0-9.0.122-1.el8_10 (AXSA:2026-2155:21)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2155:21 advisory. dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability CVE-2026-58280 dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET...

RHEL 9 : libxml2 (RHSA-2026:89750)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89750 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: mingw-libxml2:...

RHEL 9 : libxml2 (RHSA-2026:90309)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90309 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: mingw-libxml2:...

CVE-2026-31158

The CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 web application is vulnerable to an unauthenticated Boolean-based SQL Injection (CWE-89) in its login functionality. An attacker can exploit improper handling of user-supplied input in the TxtUsername parameter via a POST request to manipulate b...

Apple Security Advisory 10-26-2026-6

Apple Security Advisory 10-26-2026-6 - macOS Sequoia 15.8.2 addresses out of bounds access, out of bounds read, out of bounds write, use-after-free, memory corruption, buffer overflow, integer overflow, arbitrary code execution, and information disclosure vulnerabilities...

Apple Security Advisory 10-26-2026-5

Apple Security Advisory 10-26-2026-5 - macOS Tahoe 26.7.2 addresses out of bounds access, out of bounds read, out of bounds write, use-after-free, memory corruption, buffer overflow, integer overflow, arbitrary code execution, and information disclosure vulnerabilities...

PHP Session Upload Progress Exposure Checker

A command-line tool that checks PHP configuration and application code for exposure to the session upload progress vulnerability, including the required serialize handler, runtime iniset, and upload progress conditions...

Node.js 26.12.0 Brotli Decoder Remote Verifier

Node.js versions before 22.23.4, 24.22.1, and 26.12.1 contain an out-of-bounds write in the bundled Brotli decoder. This tool non-destructively verifies exposed HTTP request-body Brotli decoding paths using crafted compressed streams...

PT-2026-125517

OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allows a project member to bypass the AST allowlist by aliasing the Function constructor. Attackers with write access can read payload.constructor.constructor into a local and call it to run arbitrary...

PT-2026-125102

The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from pretrained method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically...

UBUNTU-CVE-2026-116014

open62541 1.5.0 before 1.5.7 contains an integer overflow in UADataTypefromStructureDescription that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UAClientgetRemoteDataTypes, causing decodeBinaryStructure to...

PT-2026-125337

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code...

PT-2026-125472

FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl BMP Image::load bmp that allows attackers to corrupt stack memory by supplying an oversized BMP colors used field. Attackers can craft BMP or ICO files with colors used above 256 to overflow the 768-byte colormap array,...

PT-2026-123387

An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego Windows installer executable-resolution logic...