Rocky Linux 9.6 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc (ALMALINUX9.6:CLSA-2026:1791456473)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791456473 advisory. - Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4,...

CVE-2026-18390: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justice General Directorate of Information Technology UYAP Document...

Rocky Linux 10.2 [CIQ] Security Update: dovecot / dovecot-debuginfo / dovecot-debugsource / dovecot-devel / etc Multiple Vulnerabilities (crlsa-2026_79371)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202679371 advisory. dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters CVE-2026-42391 dovecot: Dovecot: Authentication bypass via incorrect...

EulerOS 2.0 SP11 : dracut (EulerOS-SA-2026-4224)

According to the versions of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options,...

PT-2026-110608

Name of the Vulnerable Software and Affected Versions Linksys E1700 version 1.0.0.4.003 Description Remote OS command injection is possible through the manipulation of the 6rd prefix and 6rd prefix len arguments within the setLinksysIpv6 function located in the /goform/setLinksysIpv6 file...

Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-772...

Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

PT-2026-110735

Name of the Vulnerable Software and Affected Versions Grav Git Sync versions 1.0.2 through 3.4.12 Description Authenticated content editors can execute operating system commands by injecting shell substitutions into profile fields. This occurs when gravuser or gravfull author mode is enabled,...

ALSA-2026:80506 Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-772...

ALSA-2026:80507 Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-772...

CVE-2026-108953: Improper Neutralization of Special Elements used in an OS Command

mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell metacharacters into executecommand arguments. Attackers or malicious prompts can call a safe command such as pwd with arguments like ';' to run...

AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791820273)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791820273 advisory. - A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a differen...

PT-2026-110858

Name of the Vulnerable Software and Affected Versions Edimax BR-6208AC version 1.32 Description Remote command injection is possible due to improper processing of the /goform/formAutoFWupgrade endpoint. An attacker can execute arbitrary commands by manipulating the tftpsIP argument. Recommendatio...

PT-2026-110967

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite - Location Service for Esri Component versions 9.0 through 9.2 Description Command injection is possible due to improper sanitization of a user-controlled value passed to a shell command within a Kubernetes operato...

xsubfind3r

xsubfind3r xsubfind3r es una utilidad de línea de comandos diseñada para descubrir subdominios de un dominio de manera simple y eficiente. Funciona recopilando información de diversas fuentes pasivas, lo que significa que no interactúa directamente con el objetivo, sino que recoge datos que ya...

mylg

myLG, Herramienta de Diagnóstico de Red en Línea de Comandos myLG es una utilidad de software de código abierto que combina las funciones de diferentes sondas de red en una sola herramienta de diagnóstico de red. Características Vidrios de red populares ping/trace/bgp: Telia, Level3, NTT, Cogent,...

faraday_plugins

Instalación pip install faraday-plugins Comandos Listar plugins Lista todos los plugins y si son compatibles con comandos y/o informes Parámetros opcionales: -cpf / --custom-plugins-folder PATH: Si se indica, también buscará plugins personalizados en esa ruta faraday-plugins list-plugins Probar l...

CVE-2026-108976

GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992...

AZL-107949 CVE-2026-108976 affecting package emacs 29.4-7

GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992...

UBUNTU-CVE-2026-108976

GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992...