SimpleHelp <= 5.5.7 - Arbitrary File Upload

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file i.e. zip slip. This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user. This template is a...

CVE-2026-122192

A flaw was found in Firecracker. Improper handling of failed memory remapping can allow a privileged user inside a guest virtual machine to read or modify the host's Virtual Machine Monitor VMM process memory. This vulnerability can be triggered through memory ballooning or discard operations on...

CVE-2026-119083

A flaw was found in GluonTS. An attacker can achieve arbitrary file write by providing a specially crafted archive containing symbolic or hard links to the archive extraction utility. When unpacked, files can be written outside the intended destination directory with the privileges of the running...

CVE-2026-114134

A flaw was found in the Black GitHub Action. When configured to read project settings from a configuration file, the action fails to validate the specified version identifier. A remote attacker capable of submitting a pull request can supply a reference to external malicious code, leading to...

CVE-2026-122329

A flaw was found in SDLmixer. The library's Audio Interchange File Format AIFF decoder miscalculates memory offsets when decompressing audio samples, resulting in a stack-based buffer overflow. An attacker could exploit this vulnerability by supplying a specially crafted audio file, potentially...

CVE-2026-122299

A flaw was found in Dulwich. This flaw allows arbitrary code execution on systems that process untrusted repositories. When parsing Git commit objects, Dulwich resolves duplicate tree headers to the last occurrence instead of the first, conflicting with standard Git behavior. A remote attacker ca...

CVE-2026-76826

A flaw was found in tsParticles. The automated release workflow interpolates release note text directly into a shell command without proper sanitization. A remote attacker or contributor can exploit this vulnerability by submitting content containing shell control characters, leading to arbitrary...

CVE-2026-76077

A flaw was found in asn1scc. The XML Encoding Rules XER tokenizer does not properly enforce length bounds when copying tag data and fails to check buffer limits during input processing. A remote attacker could exploit this vulnerability by providing a crafted XER message, leading to stack memory...

CVE-2026-102739

A flaw was found in ESPectre. The analysis tools insecurely load dataset files with Python object deserialization enabled. An attacker can supply a specially crafted dataset file containing malicious serialized data, leading to arbitrary code execution when a user or developer processes the file...

CVE-2026-108387

A flaw was found in radare2. An attacker can exploit this vulnerability by convincing a user to open or analyze a specially crafted binary file. When parsed, malicious data causes radare2 to invoke an internal debugging handler that executes system commands with attacker-supplied arguments. This...

CVE-2026-123019

A flaw was found in DB-GPT's Hugging Face adapter. A remote attacker could exploit this vulnerability by manipulating the trustremotecode setting when loading model repositories. This causes the application to include and run untrusted external code, leading to arbitrary code execution on the hos...

CVE-2026-123020

A flaw was found in DB-GPT. The application fails to properly sanitize user input before passing it to the Jinja2 template engine in the skill prompt component. A remote attacker could exploit this vulnerability by submitting crafted template expressions, leading to server-side template injection...

CVE-2026-122328

A flaw was found in SDLmixer. A stack-based buffer overflow vulnerability exists in the WAV audio decoder when processing audio streams compressed with A-law or mu-law formats. By enticing a user or application to process a specially crafted WAV file, an attacker could overwrite stack memory,...

CVE-2026-121958

A flaw was found in FreeRDP. This vulnerability allows a remote attacker to cause a Denial of Service DoS or potentially execute arbitrary code on the client system. An attacker operating a malicious Remote Desktop Protocol RDP server, or acting in a man-in-the-middle position, can exploit this...

CVE-2026-82912

A flaw was found in Apache OFBiz. An expression language injection vulnerability in the email service allows a remote authenticated attacker with basic view permissions to execute arbitrary operating system commands. By submitting crafted script expressions through the invoice email form, the...

CVE-2026-84183

A flaw was found in Apache OFBiz. An improper authorization check allows a remote authenticated user with limited view permissions to modify restricted content and execute arbitrary commands. By exploiting flawed permission validation to evaluate server logs containing injected input as applicati...

Malicious code in kurobails (npm)

kurobails is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own authenticated WhatsApp account to an author-chosen WhatsApp Channel. Part of the campaign OX Security documented as "PhantomSub" 2026-09-28:...

Malicious code in @nuri.yavuz.tr.2/my-unique-pinger (npm)

Source: ossf-package-analysis d9a584d7d9890fd25a656e38f323071b7ac3b419a2050fe50452c598f78a4876 The OpenSSF Package Analysis project identified '@nuri.yavuz.tr.2/my-unique-pinger' @ 1.0.2 npm as malicious. It is considered malicious because: - The package executes one or more commands associated...

Malicious code in oktz-baileys (npm)

oktz-baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own authenticated WhatsApp account to an author-chosen WhatsApp Channel. Part of the campaign OX Security documented as "PhantomSub" 2026-09-28:...

bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay

A flaw was found in BIND. This vulnerability may allow a remote attacker to achieve arbitrary code execution on the target server. An attacker who captures a valid User Datagram Protocol UDP message signed with Generic Security Service Transaction Signature GSS-TSIG can replay it while the...