CVE-2026-107734 SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is substituted for the %f placeholder in an external editor command line without safe Windows argument quoting, and the resulting command line is passed to CreateProcessW. A user...

CVE-2026-107734

SumatraPDF (version 3.5.2 and earlier) is vulnerable to SyncTeX Argument Injection during an inverse search. The root cause is the substitution of an attacker-controlled SyncTeX source filename for the %f placeholder in an external editor command line without employing safe Windows argument quoti...

CVE-2026-107734 SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is substituted for the %f placeholder in an external editor command line without safe Windows argument quoting, and the resulting command line is passed to CreateProcessW. A user...

CVE-2026-107734 SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is substituted for the %f placeholder in an external editor command line without safe Windows argument quoting, and the resulting command line is passed to CreateProcessW. A user...

CLSA-2026-1791427864 vim: Fix of 3 CVEs

CVE-2026-73072: fix heap buffer overflow in setsofo with a crafted spell file upstream 9.2.0846 - CVE-2026-73076: fix arbitrary command execution via a crafted .VimballRecord vimball member upstream 9.2.0847 - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu...

vim: Fix of 3 CVEs

CVE-2026-73072: fix heap buffer overflow in setsofo with a crafted spell file upstream 9.2.0846 - CVE-2026-73076: fix arbitrary command execution via a crafted .VimballRecord vimball member upstream 9.2.0847 - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu...

EUVD-2026-43181

PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls...

PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls

Summary The AICoder UI component exposes writetofile and executecommand tools to the LLM with no path validation and no command sanitization. An attacker can achieve arbitrary file write to any location on the filesystem including /root/.ssh/authorizedkeys, /etc/crontab and arbitrary command...

PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend

Summary SecurityPolicy in praisonaiagents/sandbox/config.py is a documented configuration data class with fields for allowsubprocess, allowedpaths, blockedpaths, allowedcommands, blockedcommands, allowedimports, and blockedimports. Its strict classmethod is explicitly described as creating "a...

GHSA-5R6C-GJ4G-R697 PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend

Summary SecurityPolicy in praisonaiagents/sandbox/config.py is a documented configuration data class with fields for allowsubprocess, allowedpaths, blockedpaths, allowedcommands, blockedcommands, allowedimports, and blockedimports. Its strict classmethod is explicitly described as creating "a...

CVE-2026-84057 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-84057

IBM Guardium Data Protection versions 12.1 and 12.2.2 are vulnerable to an OS command injection vulnerability (CWE-78 ) due to the improper neutralization of special elements used in an OS command. A remote attacker can exploit this flaw to execute arbitrary commands. The vulnerability affects th...

CVE-2026-84057 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-84209 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-84209

IBM Guardium Data Protection versions 12.2.2 and 12.1 are vulnerable to a SQL injection flaw. The root cause is the improper neutralization of special elements used in an SQL command, resulting from a failure to properly sanitize input. This allows a remote attacker to execute arbitrary SQL comma...

CVE-2026-107779

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a missing authentication vulnerability in bundled xxl-job-admin JobInfoController endpoints annotated with @PermissionLimitlimit = false. Unauthenticated attackers can POST GLUESHELL, GLUEPYTHON, or GLUEPOWERSHELL job...

CVE-2026-19482 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of command arguments...

CVE_2021-41773

Vulnerability scanner for Apache Path Traversal CVEs 2021-41773...

EUVD-2026-95257

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a missing authentication vulnerability in bundled xxl-job-admin JobInfoController endpoints annotated with @PermissionLimitlimit = false. Unauthenticated attackers can POST GLUESHELL, GLUEPYTHON, or GLUEPOWERSHELL job...

CVE-2026-107322

An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted database command value introduced in the agent contex...