libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements

A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the xmlSnprintfElements function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited...

libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow

A flaw was found in libxml2, specifically within the xmlcatalog utility when operating in shell mode. An attacker can exploit multiple stack-based buffer overflows by providing an excessively long input line. This leads to memory corruption, which may cause the application to crash or potentially...

Important: Red Hat Security Advisory: libxml2 security, bug fix, and enhancement update

An update for libxml2 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

CVE-2026-92092

A flaw was found in openshift-ansible. The installer container's "run" script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...

CVE-2026-92092

A flaw in openshift-ansible allows a remote attacker to achieve arbitrary code execution because the installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification . An attacker could perform a Man-in-the-Middle (MITM) attack or comprom...

CVE-2026-92092 Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification

A flaw was found in openshift-ansible. The installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...

CVE-2026-92092 Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification

A flaw was found in openshift-ansible. The installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...

EUVD-2026-113354

A flaw was found in openshift-ansible. The installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...

CVE-2026-119193

PHPUnit, a PHP testing framework, is vulnerable to arbitrary code execution in versions 13.4.0 through 13.4.4 . The root cause is located in the TestCase::coverageFilesDirectory() logic within src/Runner/Phpt/TestCase.php, which creates temporary files for PHPT code coverage in a predictable dire...

CVE-2026-119193 PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling

PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory logic in src/Runner/Phpt/TestCase.php creates temporary files for PHPT code coverage in a predictable phpunit-phpt directory under sysgettempdir and reuses that directory without verifying its...

CVE-2026-119193 PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling

PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory logic in src/Runner/Phpt/TestCase.php creates temporary files for PHPT code coverage in a predictable phpunit-phpt directory under sysgettempdir and reuses that directory without verifying its...

CVE-2026-119193

PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory logic in src/Runner/Phpt/TestCase.php creates temporary files for PHPT code coverage in a predictable phpunit-phpt directory under sysgettempdir and reuses that directory without verifying its...

CVE-2026-119193 PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling

PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory logic in src/Runner/Phpt/TestCase.php creates temporary files for PHPT code coverage in a predictable phpunit-phpt directory under sysgettempdir and reuses that directory without verifying its...

librsvg: Use-after-free when XML includes have duplicated entities

A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...

CVE-2026-103093

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potential...

GoBfuscator

🛡️ GoBfuscator - Advanced Go Code Obfuscation Tool 🔍 Overview GoBfuscator is a professional-grade obfuscation tool specifically designed for Go Golang source code. It provides multiple layers of protection to make reverse engineering difficult while maintaining 100% runtime functionality. Key...

CVE-2026-103093 Sandbox Escape via Table Rotation in ServiceNow AI Platform

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potential...

EUVD-2026-113362

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potential...

CVE-2026-103093

A sandbox escape security issue exists in the ServiceNow AI Platform . This vulnerability allows an authenticated user with the admin role to bypass Rhino sandbox restrictions , enabling the execution of arbitrary code on the underlying host operating system. Such an exploit could lead to further...

Malicious code in orderbook-volt-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ba686d403966bfe8a9b5e8103e620c506d7e9d2823f6896b6be87409f9cc06 Package [email protected] was examined and no indicators of installer-side harm were identified. No lifecycle scripts fetching or executing...