PT-2026-111181

Name of the Vulnerable Software and Affected Versions GitLab EE versions 19.1 through 19.2.7 GitLab EE versions 19.3 through 19.3.4 GitLab EE versions 19.4 through 19.4.1 Description An issue exists where improper neutralization of special elements during the construction of AI conversation conte...

PT-2026-113545

Name of the Vulnerable Software and Affected Versions Citrix UniconOS versions prior to 2607.2 CR Citrix UniconOS versions prior to 2603 LTSR CU2 Description An issue in Citrix UniconOS allows for persistent command execution. Recommendations Update Citrix UniconOS to version 2607.2 CR or later...

PT-2026-111604

Name of the Vulnerable Software and Affected Versions CVFS affected versions not specified Description An input validation issue exists that allows for command execution. Recommendations Update CVFS to the resolved maintenance release...

PT-2026-111824

Name of the Vulnerable Software and Affected Versions Mistral Vibe versions prior to 2.25.4 Description A command permission gate bypass allows attackers to execute arbitrary commands by hiding a command substitution inside a single-quoted variable value. This technique evades detection by...

CVE-2026-109429: Interpretation Conflict

Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command substitution inside a single-quoted variable value that tree-sitter-bash static parsing cannot detect. Attackers can craft input such as...

MiracleLinux 8 : vim-8.0.1763-32.el8_10.ML.1 (AXSA:2026-2020:25)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2020:25 advisory. vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion CVE-2026-73073 Tenable has extracted the preceding description block directl...

Debian dla-4832 : nagios4 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4832 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4832-1 [email protected]...

PT-2026-111680

Name of the Vulnerable Software and Affected Versions JumpServer versions prior to 4.10.17-lts Description Ansible-based automation rendering allows the evaluation of attacker-controlled template expressions by users with permissions to create or execute affected automation tasks. This can trigge...

PT-2026-111395

Name of the Vulnerable Software and Affected Versions RUGGEDCOM CROSSBOW versions prior to V6.0 Description Authenticated attackers with specific privileges can execute arbitrary SQL commands on the underlying database. This occurs because the system fails to properly validate or sanitize the...

PT-2026-111393

Name of the Vulnerable Software and Affected Versions RUGGEDCOM CROSSBOW versions prior to V6.0 Description Authenticated attackers with specific privileges can execute arbitrary SQL commands on the underlying database. This occurs because the system fails to properly validate or sanitize input...

Cisco NX-OS Python Sandbox Bypass Command Execution

The vulnerability of the built-in Python interpreter in the Cisco NX-OS operating system is related to insufficient spatial separation. Exploiting this vulnerability could allow an attacker to bypass the sandboxing protection mechanisms and execute arbitrary commands...

[SECURITY] [DSA 6556-1] nagios4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6556-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 12, 2026 https://www.debian.org/security/faq -...

CVE-2026-59774

Summary An unauthenticated remote attacker can submit Org-mode markup containing a +INCLUDE directive to POST /owner/repo/markup for any suitable public repository to read arbitrary server files. By extracting INTERNALTOKEN from app.ini, they can inject a Git hook through the internal logger and...

CVE-2020-7247

CVE-2020-7247 This vulnerability exists in OpenBSD’s mail server OpenSMTPD’s “smtpmailaddr” function, and affects OpenBSD version 6.6. This allows an attacker to execute arbitrary shell commands like “sleep 66” as root user How to use? python3 getShell.py If you need a reverse shell then run it...

EUVD-2026-97779

PHPCSUtils is a suite of utility functions for use with PHPCodeSniffer. From 1.0.0-alpha1 until 1.2.3, PHPCSUtils\AbstractSniffs\AbstractArrayDeclarationSniff::getActualArrayKey evaluates attacker-controlled array-key expressions with eval, allowing callback-form keys in untrusted PHP code scanne...

CVE-2026-109289 Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocket

Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket. Because the terminal proxy route in terminals.py checks access only on the first message, deactivated...

[SECURITY] [DLA 4831-1] libgit2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4831-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley October 12, 2026 https://wiki.debian.org/LTS -...

CVE-2026-103528

Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions. An authenticated administrator can inject malicious Smarty expressions into email templates via the messages configuration interface, and when the template is previewed or rendered,...

CVE-2026-103528 CVE-2026-103528

Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions. An authenticated administrator can inject malicious Smarty expressions into email templates via the messages configuration interface, and when the template is previewed or rendered,...

CVE-2026-103528

The open-source e-commerce platform Thelia v2.6.0 is vulnerable to Remote Code Execution (RCE) due to improper restrictions on the Smarty template engine . An authenticated administrator can inject malicious Smarty expressions into email templates through the messages configuration interface . Wh...