ROS-20261002-73-0068

The vulnerability of regular expression functions in the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261002-73-0034

The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

SUSE SLES12 Security Update : python-PyYAML (SUSE-SU-2026:4402-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4402-1 advisory. - Update to 5.3.1. - CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code...

CVE-2026-103631: Heap-based Buffer Overflow

Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-104404

Name of the Vulnerable Software and Affected Versions fsspec versions 0.9.0 through 2026.6.0 Description The fsspec.implementations.reference.ReferenceFileSystem evaluates fields from Kerchunk reference JSON documents using unrestricted jinja2.Template....render... calls within the process...

The vulnerability of the OpenCode artificial intelligence-based software development agent, related to uncontrolled resource consumption, allows a hacker to execute arbitrary code.

The vulnerability of the OpenCode artificial intelligence-based software development agent is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Bad Plugins vulnerability (USN-8855-1)

The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8855-1 advisory. It was discovered that GStreamer Bad Plugins incorrectly validated the size of multi-channel audio...

CVE-2026-84411: Integer Underflow (Wrap or Wraparound)

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of...

CVE-2026-47542

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause improper input validation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure,...

PT-2026-104344

Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

PT-2026-104345

Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

Multiple OpenSSH Vulnerabilities (CVE-2026-35386, CVE-2026-35414, CVE-2026-35387, CVE-2026-35388)

Brocade is issuing a security advisory regarding multiple security vulnerabilities discovered in OpenSSH. Vulnerability Details CVE-2026-35386: Remote Code Execution via Shell Metacharacters in Usernames Severity / CVSS v3 Base Score: High / 8.1 Common Weakness Enumeration: CWE-287 Improper...

ROS-20261002-73-0156

The vulnerability of the RC-server of the cloud synchronization tool Rclone relates to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request to the operations/fsinfo endpoi...

PT-2026-104198

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The c glib bindings in Apache Thrift contain an issue involving the use of an uninitialized resource and the return of an incorrect status code. Recommendations Update to version 0.25.0...

PT-2026-104082

Name of the Vulnerable Software and Affected Versions SiteOrigin Widgets Bundle versions prior to 1.73.3 Description The SiteOrigin Widgets Bundle plugin for WordPress contains a Local File Inclusion flaw. Authenticated attackers with contributor-level access or higher can include and execute...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Django vulnerabilities (USN-8848-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8848-1 advisory. Bence Nagy discovered that GeoDjango in Django incorrectly handled spatial lookup...

CVE-2026-94485: Origin Validation Error

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-105043: User Interface (UI) Misrepresentation of Critical Information

MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution...

MikroTik RouterOS < 7.24 Web Management Integer Underflow RCE (CVE-2026-84411)

According to its self-reported version, the remote networking device is running a version of MikroTik RouterOS prior to 7.24. It is, therefore, affected by a remote code execution vulnerability. The web management service in affected RouterOS versions contains an integer underflow in its HTTP...

JetBrains TeamCity < 2025.11.8 / 2026.1.x < 2026.1.4 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.8, or 2026.1.x prior to 2026.1.4. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the...