CVE-2026-17142 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper authentication...

CVE-2026-17142

CVE-2026-17142 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , where an improper authentication flaw allows a remote, unauthenticated attacker to execute arbitrary commands. The CVSS 3.1 score is 9.8 (Critical) with a network vector, low complexity, no privileges or user interaction required,...

CVE-2026-16997 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper privilege management...

CVE-2026-16997

CVE-2026-16997 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A local attacker with no privileges but requiring user interaction can execute arbitrary commands due to improper privilege management , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.8 H...

CVE-2026-53804

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

autopwn

autopwn Specifica i target ed esegui set di strumenti contro di essi autopwn è progettato per rendere la vita del pentester più facile e più coerente, permettendogli di specificare gli strumenti che desidera eseguire contro i target, senza doverli digitare in una shell o scrivere uno script. Ques...

cachegrab

Cachegrab Cachegrab è uno strumento progettato per aiutare a eseguire e visualizzare attacchi cache basati su trace contro il software nel mondo sicuro dei core ARMv8 con supporto TrustZone. Per una panoramica su come funziona Cachegrab internamente, vedi the Cachegrab release announcement. Usare...

WMIcmd

Das Problem Bei Untersuchungen mit geringer Auswirkung und ähnlichen Aktivitäten möchte man möglicherweise minimieren, was auf die Festplatte geschrieben wird / offensichtlich ist. Dieses Tool ermöglicht es uns, Befehle über WMI auszuführen und Informationen zu erhalten, die über diesen Kanal son...

EUVD-2026-63587

NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled command and NSBundlePath values.This issue affects NoSleep: 1.5.1...

EUVD-2026-63544

A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote attacker may provide specially crafted...

CVE-2026-19586 Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways

A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote attacker may provide specially crafted...

EUVD-2026-44804

NocoBase backup restore schema name allows command injection...

CVE-2026-54449

LangBot is a global IM bot platform designed for LLMs. In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration without an adequate authorization boundary. In src/langbot/pkg/provider/tools/loaders/mcp.py, StdioServerParameters accepts the configur...

EUVD-2026-63480

LangBot is a global IM bot platform designed for LLMs. In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration without an adequate authorization boundary. In src/langbot/pkg/provider/tools/loaders/mcp.py, StdioServerParameters accepts the configur...

CVE-2026-54449 LangBot: Authenticated RCE Via MCP Configuration

LangBot is a global IM bot platform designed for LLMs. In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration without an adequate authorization boundary. In src/langbot/pkg/provider/tools/loaders/mcp.py, StdioServerParameters accepts the configur...

CVE-2026-16932

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable...

CVE-2026-16932 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable...

CVE-2026-16932

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 fail to properly validate the ODMDIR environment variable, allowing a local attacker with low privileges to execute arbitrary commands. CVSS 3.1 scores this HIGH (8.8), with impact on confidentiality, integrity, and availability. Exploitation status is not pro...

EUVD-2026-63389

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable...

[SECURITY] [DSA 6453-1] libgit2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6453-1 [email protected] https://www.debian.org/security/ Aron Xu August 20, 2026 https://www.debian.org/security/faq -...