PT-2026-82543

Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows an authenticated administrator to execute arbitrary operating system commands on the Liman server. The ip address parameter is embedded...

CVE-2026-68766

hashcat fails to restrict command-line options when parsing restore fi...

UBUNTU-CVE-2026-74655

In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, the UART gets stuck infinitely repeating corrupted TX DMA frames. The DMA-mode uartops does not provide a flushbuffer...

CVE-2026-35868

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of LB-link Router AC2100AZ3 V1.0.4. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

CVE-2026-35869

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

RockyLinux 10 : ruby4.0 (RLSA-2026:50773)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:50773 advisory. zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader CVE-2026-27820 net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF...

Linux Distros Unpatched Vulnerability : CVE-2026-80158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the ipagetkeytab module of the community.general Ansible collection. The module's bindpw parameter, used to supply the LDAP simple-bind...

TencentOS Server 3: vim (TSSA-2026:0916)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0916 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

...[ More ]

Barrier version 2.4.0 for Windows contains a local privilege escalation vulnerability in the IPC command interface exposed by the barrierd.exe service on 127.0.0.1:24801. The IPC server accepts local TCP clients and processes a command line together with a one-byte elevation flag without...

Security update for liboqs (moderate)

openSUSE security update: security update for liboqs ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21634-1 Rating: moderate References: bsc1215751 bsc1246301 bsc1267001 bsc1267007 Cross-References: CVE-2025-52473 CVE-2026-44518 CVE-2026-46344 CVSS...

PHP Composer -- Multiple vulnerabilities

Composer project reports: Validate package bin paths against path traversal using symlinks GHSA-96h3-5x6v-m776, CVE-2026-59944 Fixed command injection via malicious Perforce url GHSA-rvx4-ffvw-m9q3...

TencentOS Server 3: dracut (TSSA-2026:0902)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0902 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

...[ More ]

An unauthenticated remote debugger vulnerability exists in Escargot version 4.3.0-214-gfaee4437 when the application is compiled with ESCARGOTDEBUGGER support and the debug server is enabled using --start-debug-server. The debugger accepts client connections without authentication or authorizatio...

UBUNTU-CVE-2026-74702

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array protsgl according to the acknowledged VIRTIOSCSIFT10PI bit. The comma...

samsung-android-lpe

Parte 1: Esecuzione arbitraria di comandi AT CVE-2026-20980 I comandi dell'Application Processor AP sono gestiti da atdistributor dopo aver commutato la modalità di connessione su un dispositivo sbloccato utilizzando. root@kitploit: AT+SWATD=0 AT+ACTIVATE=0,0,0 AT+SWATD=1 atdistributor verifica i...

nmlinux

NMLinux · v1.7.12 Ein vereinheitlichtes Netzwerk-Toolkit für Linux und macOS – untersuchen, verbinden, diagnostizieren. NMLinux ist eine einzige, vereinheitlichte GUI, die 29 Netzwerkmodule in einem Fenster vereint: Schnittstellenüberwachung, WLAN, DNS, SSH-Terminal, Firewall-Ansicht,...

HASH

HASH Honeypot Software HTTP Agnostic HASH è un framework per creare e avviare honeypot a bassa interattività. 🌟 Perché HASH? La filosofia principale di HASH è essere facile da configurare e flessibile per imitare qualsiasi software in esecuzione su HTTP/HTTPs. Con il minimo ingombro possibile per...

fawkes

Agente C2 Fawkes Mythic Fawkes è un agente Mythic C2 interamente vibe-coded. È iniziato come un "mi chiedo" e si è trasformato in un obiettivo. Il mio obiettivo è non scrivere una singola riga di codice per questo agente, ma produrlo esclusivamente tramite prompt. Inizialmente ho tentato di...

CVE-2024-1874

CVE-2024-1874 CVE-2024-1874 के लिए प्रूफ ऑफ कॉन्सेप्ट कमांड इंजेक्शन Array-ish $command Parameter of procopen के माध्यम से CVE-2024-1874 फिक्स को बायपास करना CVE: PHP संस्करण 8.1. 8.1.29 से पहले, 8.2. 8.2.20 से पहले, 8.3. 8.3.8 से पहले, CVE-2024-1874 का फिक्स तब काम नहीं करता जब कमांड नाम में...

jailer

Jailer - eBPF-basierte obligatorische Zugriffskontrolle MAC Warnung : Dieses Projekt befindet sich in intensiver Entwicklung und ist NICHT bereit für den Produktionseinsatz. APIs, Richtlinienformate und Verhalten können sich ohne Vorankündigung ändern. Nur zu Test- und Experimentierzwecken...