HPESBNW05172 rev.1 - Multiple Vulnerabilities in HPE Networking Fabric Composer

Potential Security Impact: Local: Access Restriction Bypass, Denial of Service DoS, Disclosure of Information, Elevation of Privilege, Unauthenticated Disclosure of Information, Unauthorized Read Access to Files, Unauthorized Write Access to the File System; Remote: Arbitrary Command Execution,...

UBUNTU-CVE-2026-119586

SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqliteschema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .syst...

CVE-2026-119586

SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqliteschema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .syst...

qemu-kvm security, bug fix, and enhancement update

10.1.0-17.el98.9 - kvm-qcow2-Add-keepdatafile-command-line-option.patch RHEL-164549 - kvm-qcow2-Simplify-size-round-up-in-cocreateopts.patch RHEL-164549 - kvm-iotests-common.filter-Sort-keepdatafile.patch RHEL-164549 - kvm-iotests-244-Add-test-cases-for-keepdatafile.patch RHEL-164549 -...

UBUNTU-CVE-2026-99230

In the Linux kernel, the following vulnerability has been resolved: iouring/cmd: don't leave list poison in -hashnode iouringcmddelcancelable uses hlistdel to take a command off -cancelableuringcmd, which leaves LISTPOISON1/2 behind in -hashnode. Requests are recycled through the request cache...

PT-2026-136269

Name of the Vulnerable Software and Affected Versions SolarWinds Dameware affected versions not specified Description An authenticated attacker can exploit a command injection flaw in the remote support software to execute unauthorized commands, potentially leading to the full compromise of the...

PT-2026-136381

A command injection vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated administrative user to execute arbitrary commands with elevated privileges on the underlying operating system...

OpenIdentityPlatform OpenAM 16.0.5 Pre-Authentication Remote Code Execution

OpenIdentityPlatform OpenAM versions prior to version 16.0.6 contain a pre-authentication remote code execution vulnerability through unsafe deserialization of the jato.clientSession HTTP parameter. This proof of concept sends a crafted serialized object to Password Reset endpoints and returns...

XZ Utils 5.6.1 Backdoor Proof of Concept

This proof of concept sets up isolated OpenSSH endpoints with XZ Utils version 5.6.1's modified liblzma to demonstrate pre-authenticated command execution. https://packetstorm.news/download/239212...

ROS-20261103-73-0161

A vulnerability in Python 3 related to insufficient validation of incoming requests. Exploitation of this vulnerability may allow a remote attacker to carry out an SSRF attack...

UBUNTU-CVE-2026-119146

ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the modrewrite int:utf8trans RewriteMap that allows remote attackers to overwrite static buffers. Attackers can send FTP command arguments longer than 1024 bytes, without authentication if pre-login commands are...

CVE-2026-44266: enspirit elo: Elo is a purely functional expression language for no-code tools

Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, the Ruby backend in src/compilers/ruby.ts embeds attacker-controlled text in Ruby double-quoted strings without escaping , so Ruby interpolation forms in the string-literal emitter or the labelled subtype-constraint...

CVE-2026-85033: zephyrproject zephyr: The AVRCP Target role in subsys/bluetooth/host/classic/avrcp.c keeps its vendor-dependent response transmit state in a…

The AVRCP Target role in subsys/bluetooth/host/classic/avrcp.c keeps its vendor-dependent response transmit state in a per-connection object selected by connection index getavrcptg, with the per-transfer context tid, sentlen, and the BTAVRCPTGFLAGTXONGOING flag stored in the userdata of the queue...

PT-2026-136128

The AVRCP Target role in subsys/bluetooth/host/classic/avrcp.c keeps its vendor-dependent response transmit state in a per-connection object selected by connection index get avrcp tg, with the per-transfer context tid, sent len, and the BT AVRCP TG FLAG TX ONGOING flag stored in the user data of...

CVE-2026-95731: Hewlett Packard Enterprise (HPE) Fabric Composer: Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an…

Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access the affected system using hardcoded credentials. Successful exploitation could allow an attacker to gain unauthorized administrative access t...

PT-2026-136385

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer versions prior to 7.4.0 Description The command-line interface contains hardcoded credentials that allow an unauthenticated remote attacker to gain unauthorized administrative access to the affected system with...

PT-2026-136409

A command injection vulnerability exists in the API of HPE Networking Fabric Composer and could be exploited by an authenticated remote attacker with administrative privileges if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to ga...

Cisco UCS Manager Command Injection (cisco-sa-nxos-cmdinj-Lq6jsZhH)

According to its self-reported version, Cisco UCS Manager is affected by a vulnerability. - A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This...

Cisco NX-OS Software Command Injection (cisco-sa-nxos-cmdinj-Lq6jsZhH)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to execute arbitrary commands on the underlying operating system of an affected device. Th...

CVE-2026-119146

ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the modrewrite int:utf8trans RewriteMap that allows remote attackers to overwrite static buffers. Attackers can send FTP command arguments longer than 1024 bytes, without authentication if pre-login commands are...