OnePlus OxygenOS permission and access control issues vulnerability

A security vulnerability exists in OnePlus OxygenOS versions prior to 16.1.0 through 16.1.10.500, 16.0.0 through 16.0.5.1200, and 15.0.0 through 15.0.0.2000. This vulnerability stems from improper authorization of a Binder method exposed via the olc2 log HAL. This method executes shell commands...

Linux Distros Unpatched Vulnerability : CVE-2026-102827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 4.0.0, th...

PT-2026-120833

Name of the Vulnerable Software and Affected Versions Pillow versions 11.0.0 through 12.x Description Multi-frame loaders in this Python imaging library can retain an ImagingCore allocation created for a narrow frame mode. When a subsequent frame of the same dimensions changes the logical mode an...

RockyLinux 10 : environment-modules (RLSA-2026:80664)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:80664 advisory. environment-modules: Command injection in environment-modules Bash completion via malicious module names containing shell metacharacters CVE-2026-85013 Tenable...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: lrzsz (UTSA-2026-142360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142360 advisory. lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying...

RockyLinux 8 : emacs (RLSA-2026:80506)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:80506 advisory. emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-77219 emacs: local shell command injection through the use...

PT-2026-120514

Name of the Vulnerable Software and Affected Versions OnePlus OxygenOS versions 16.1.0 through 16.1.10.499 OnePlus OxygenOS versions 16.0.0 through 16.0.5.1199 OnePlus OxygenOS versions 15.0.0 through 15.0.0.1999 Description An incorrect authorization issue exists in the olc2 logging HAL, which...

VulnCheck KEV: CVE-2026-7873

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement...

RHEL 9 : goose (RHSA-2026:80764)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:80764 advisory. For details on how to apply this update, which includes the changes described in this advisory, refer to:...

Pillow buffer error vulnerability

Versions 11.0.0 through 13.0.0 of Pillow contain a buffer error vulnerability. This vulnerability arises because the multi-frame loader reuses unvalidated modes and dimensions from expired ImagingCore native storage when changing the logical mode of subsequent frames and decoding data. Specialize...

PT-2026-122473

Уязвимость системы обнаружения вторжений Snort связана с недостатками процедуры аутентификации. Эксплуатация уязвимости может позволить нарушителю выполнить произвольные команды...

PT-2026-120508

Name of the Vulnerable Software and Affected Versions OnePlus OxygenOS versions 16.1.0 through 16.1.10.499 OnePlus OxygenOS versions 16.0.0 through 16.0.5.1199 OnePlus OxygenOS versions 15.0.0 through 15.0.0.1999 Description An OS command injection and missing authorization issue exists in OnePlu...

RockyLinux 9 : emacs (RLSA-2026:80507)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:80507 advisory. emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-77219 emacs: local shell command injection through the use...

PT-2026-120185

ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allows authenticated users, including read-only reader role holders, to execute Groovy code because GremlinQueryEngine.command lacks scripting authorization checks. Attackers can submit Gremlin commands to the POST...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability arises because Redis’s inline command parsing allocates memory and copies the entire input buffer based on its current size before determining the command boundary; there is no proper lim...

Debian dla-4846 : git-lfs - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4846 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4846-1 [email protected] https://www.debian.org/lts/security/...

Rocky Linux 10.2 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_84591)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202684591 advisory. emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-77219 emacs: emacs: Command injection via crafted filenam...

PT-2026-120533

The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unauthenticated attacker who can reach a bRPC server with Redis service enabled can send an empty array header followed by a bulk string, causing an out-of-bounds write in the parser and...

Security update for yt-dlp (important)

openSUSE security update: security update for yt-dlp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22142-1 Rating: important References: bsc1286026 Cross-References: CVE-2026-55404 Affected Products: openSUSE Leap 16.0...

RHEL 10 : environment-modules (RHSA-2026:80664)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:80664 advisory. The environment-modules packages provide dynamic modification of user environment using module files. Each module file contains the information...