Permissive List of Allowed Inputs

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Permissive List of Allowed Inputs via xobjtoimage in pypdf/generic/imagexobject.py, which passes /DCTDecode stream data to...

Browser-ExternalC2

Browser-EC2...

Exploit for CVE-2026-109618

PHP session upload progress vulnerabilities This repository c...

CVE-2026-102827

A flaw was found in simple-git. This vulnerability allows an attacker who can influence command arguments to achieve arbitrary command execution on the host system. The library's security filter checks for dangerous options using exact names but fails to account for Git accepting abbreviated...

DRUPAL-CONTRIB-2026-220

This module enables you to use ffmpeg for image conversion The module doesn't sufficiently sanitize file names passed to the ffmpeg cli tool. This vulnerability is mitigated by the fact that an attacker must be able to upload images on the site...

CVE-2026-80813

A flaw was found in the Linux kernel's nvmet subsystem. A remote attacker can trigger a NULL pointer dereference in the nvmetexecuteidentifynslist function by issuing a specific Identify command CNS 07h. This vulnerability can lead to a kernel crash, resulting in a Denial of Service DoS for the...

GHSA-VXJ4-Q4G9-CRJ7 virtualenv bash activate runs commands from an environment name with a backslash before $

Summary The bash activate script escapes the environment name for only one of the two passes bash makes over PS1, so a backslash in the name undoes the escaping and a name containing $... runs as commands in the user's shell each time bash draws the prompt. Affected area...

virtualenv bash activate runs commands from an environment name with a backslash before $

Summary The bash activate script escapes the environment name for only one of the two passes bash makes over PS1, so a backslash in the name undoes the escaping and a name containing $... runs as commands in the user's shell each time bash draws the prompt. Affected area...

EUVD-2026-105273

virtualenv bash activate runs commands from an environment name with a backslash before $...

EUVD-2026-106869

virtualenv activate runs commands from the environment name in zsh with PROMPTSUBST...

GHSA-5VJQ-RRRF-7H2Q virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST

Impact zsh users activate an environment with the bash activate script, which puts the environment name into PS1. Since 21.13.0 the script escapes backslashes, dollar signs and backticks in that name, but only when BASHVERSION is set, so zsh gets the raw value. With the PROMPTSUBST option set, zs...

virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST

Impact zsh users activate an environment with the bash activate script, which puts the environment name into PS1. Since 21.13.0 the script escapes backslashes, dollar signs and backticks in that name, but only when BASHVERSION is set, so zsh gets the raw value. With the PROMPTSUBST option set, zs...

SUSE CVE-2026-112900

Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a...

EUVD-2026-106866

virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote...

virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote

Impact FishActivator defines no quote, so it inherits ViaTemplateActivator.quote, which returns shlex.quotestring. That function follows POSIX sh rules, where a backslash inside single quotes stays a literal character. fish reads ' inside single quotes as an escaped quote and \ as an escaped...

GHSA-C947-3PG5-GM8Q virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote

Impact FishActivator defines no quote, so it inherits ViaTemplateActivator.quote, which returns shlex.quotestring. That function follows POSIX sh rules, where a backslash inside single quotes stays a literal character. fish reads ' inside single quotes as an escaped quote and \ as an escaped...

Protection Mechanism Failure

Overview ognl:ognl is an OGNL - Object Graph Navigation Library. Affected versions of this package are vulnerable to Protection Mechanism Failure in the stricter-invocation block list enforcement process. An attacker can bypass intended security restrictions by leveraging reflection proxies to...

CVE-2026-76524 Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability

A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local user connects to the...

CVE-2026-76524 Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability

A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local user connects to the...

CVE-2026-76524

A vulnerability in the Open Source Snort 3 control channel socket implementation allows an authenticated, local attacker with low privileges to achieve arbitrary command execution . The root cause is a lack of authentication when a local user connects to the Snort control channel socket. Successf...