pcp security update

5.3.7-22.0.12.el810.5 - Implemented units header in csv output using pmrepOrabug: 39064482 - Adds interval option support in PCP nfsiostat tool Orabug: 38902336 - Introduces proc.numamaps metrics in linuxproc PMDA Orabug: 38509848 - adds numastat process option in the tool - Added support for siz...

pcp security update

7.0.3-5.0.1 - Fix unterminated backtick in pmloggerjanitor fix not to terminate unauthorized process patch Orabug: 39270658 - Adds interval option support in PCP nfsiostat tool Orabug: 39068870 - Introduces proc.numamaps metrics in linuxproc PMDA Orabug: 39096683 - adds numastat process option in...

PT-2026-76944

ArcadeDB versions before 26.8.1 contain a server-side request forgery vulnerability in the IMPORT DATABASE command where the security validator resolves and checks hostnames but the subsequent connection re-resolves the raw URL and follows redirects. Authenticated attackers can bypass the validat...

PT-2026-76946

ArcadeDB before 26.8.1 affected versions = 26.7.3 contains a missing authorization vulnerability in the DELETE FUNCTION SQL statement. DeleteFunctionStatement.executeSimple unregisters and persists deletion of a server-side function without any checkPermissionsOnDatabase UPDATE SCHEMA check. Any...

PT-2026-77301

Froxlor is open source server administration software. Prior to 2.3.8, the DomainZones.add API command in lib/Froxlor/Api/Commands/DomainZones.php accepts user-controlled record and type values without rejecting line delimiters, tab characters, semicolons, or unsupported DNS record types before...

PT-2026-77026

Name of the Vulnerable Software and Affected Versions Microsoft Copilot affected versions not specified Description Improper neutralization of special elements used in a command allows an unauthorized attacker to disclose information over a network. This issue, referred to as CoSnitch, involves a...

PT-2026-77271

Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. Prior to 18.13.0, the EXEC IPC handler in electron/ipc-handlers/exec.ts accepts a command string from the renderer through the IPC.EXEC channel and executes it with child process.exec. The...

slot2 Amazon Linux 2023 UEFI Bootkit

slot2 is a two-stage UEFI GRUB2 bootkit designed to establish a persistent pre-OS implant on Amazon Linux 2023 x8664 EC2 instances. It installs a custom GRUB EFI image and Unified Kernel Image, creates a UEFI NVRAM boot entry ahead of the stock Amazon entry, executes an implant with network and...

Wavestore VMS 6.48.809 Remote Code Execution

Wavestore VMS version 6.48.809 contains a command injection vulnerability in the venusd /simple/export endpoint. An authenticated remote attacker can inject shell metacharacters into the user parameter, which is URL-decoded and passed without sanitization to a command executed through popen...

Docmosis Tornado 2.11.3 Remote Code Execution

Docmosis Tornado version 2.11.3 contains an unauthenticated arbitrary file write vulnerability in the /api/render endpoint. A remote attacker can use the storeTo parameter with a file: destination to write rendered content to arbitrary new filesystem paths. When the service runs as root, a crafte...

Countersoft Gemini 7.3.0 SQL Injection / Remote Code Execution

Countersoft Gemini version 7.3.0 contains an authenticated SQL injection vulnerability in the custom field lookup functionality. An attacker with valid credentials can inject stacked SQL queries through the term parameter and, when the application uses a privileged SQL Server account, enable...

Linux Distros Unpatched Vulnerability : CVE-2026-68519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, GlancesActions.run in glances/actions.py ignores --disable-config-exec for...

Linux Distros Unpatched Vulnerability : CVE-2026-74371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: fix BPFPROGQUERY OOB write and cgroup backward compat BPFPROGQUERY writes back the 'query.revision' field unconditionally to userspace. If userspace passes...

RHEL 8 : sg3_utils (RHSA-2026:56130)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:56130 advisory. The sg3utils packages provide command-line utilities for devices that use the Small Computer System Interface SCSI command sets. Security Fixes:...

PT-2026-77154

Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command...

RHEL 9 : redhat-ds:12 (RHSA-2026:56050)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:56050 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...

Linux Distros Unpatched Vulnerability : CVE-2026-72335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: MGMT: Fix adv monitor add failure cleanup hciaddadvmonitor publishes a new advmonitor in hdev-advmonitorsidr before the powered MSFT setup step. The...

Unity Linux 20.1050a Security Update: dracut (UTSA-2026-102611)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102611 advisory. A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly...

Linux Distros Unpatched Vulnerability : CVE-2026-75002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count desynchronization could lead to information disclosure or privile...

TencentOS Server 4: dracut (TSSA-2026:0845)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0845 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...