Linux Distros Unpatched Vulnerability : CVE-2026-33245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components RSC APIs, there is a potential...

The vulnerability of XML components in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and influence the integrity of the data.

The vulnerability of XML components in Google Chrome and Microsoft Edge relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and influence the integrity of data through a speciall...

The vulnerability of the CSS components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the CSS components in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

The vulnerability of XML components in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and influence the integrity of the data.

The vulnerability of XML components in Google Chrome and Microsoft Edge relates to the exploitation of xml blind xpath injection. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and influence the integrity of data through a specially created XML file...

The vulnerability of ORB components in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.

The vulnerability of ORB components in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of PDF components in Google Chrome and Microsoft Edge web browsers allows attackers to compromise data integrity.

The vulnerability of PDF components in Google Chrome and Microsoft Edge browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to manipulate data integrity through a specially created HTML page...

The vulnerability of Google Chrome and Microsoft Edge web browsers’ Plugin components, which allows attackers to access confidential data

The vulnerability of Google Chrome and Microsoft Edge web browsers’ Plugin components is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Exploit for CVE-2025-66478

CVE-2025-66478 / CVE-2025-55182 "React2Shell" — RSC Server A...

Security Bulletin: Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components

Summary Langflow uses outbound HTTP request functionality as part of several flow components, including components for LM Studio, Home Assistant, DeepSeek, xAI, Glean, HuggingFace Inference API, Ollama, LiteLLM, and Docling Serve. These components accept user-supplied URL values and issue...

PaperCut NG/MF Critical Zero-Day Exploited in the Wild

Overview On August 27, 2026, PaperCut Software published an urgent security advisory stating that it is investigating active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF. PaperCut has confirmed customer incidents and is treating the issue as a security emergency. At the...

CVE-2025-55182

CVE-2025-55182 — React2Shell Strumento interattivo di sfruttamento per CVE-2025-55182 🧠 Cos'è CVE-2025-55182 ? React2Shell sfrutta una vulnerabilità critica di esecuzione remota di codice in React Server Components. Se il target esegue React 19 o un framework basato su RSC come Next.js, potrebbe...

GO-2026-6299 statping-ng allows attackers to escalate privileges to Administrator and access sensitive components in github.com/statping-ng/statping-ng

statping-ng allows attackers to escalate privileges to Administrator and access sensitive components in github.com/statping-ng/statping-ng...

CVE-2025-55182_CVE-2025-66478

CVE-2025-55182 - Esecuzione Remota di Codice nei Server Components di Next.js/React Panoramica Questo repository contiene un exploit Proof-of-Concept PoC per CVE-2025-55182, una vulnerabilità critica di Esecuzione Remota di Codice RCE che interessa i Server Components di React nelle versioni 19.x...

MiracleLinux 9 : mysql:8.4 (AXSA:2026-1665:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1665:01 advisory. mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026 CVE-2026-470...

RHCOS 4 : Red Hat build of MicroShift 4.16.69 (RHSA-2026:57845)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57845 advisory. - net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGSMAXFRAMESIZE frame...

USN-8674-1: OpenJDK 11 vulnerabilities

It was discovered that the JSSE component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 11 did not correctly authorize users. A remote attack...

USN-8673-1 openjdk-8 vulnerabilities

It was discovered that the JSSE component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the ImageIO component of OpenJDK 8 did not correctly authorize users. A remote...

CVE-2026-21753: Use of Unmaintained Third Party Components

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...

react2shellNSE

React2Shell PRO v2 – NSE Script Autor: Saad Ayady Licencia: Igual que Nmap código abierto Categoría: Seguro, Descubrimiento, Detección de Vulnerabilidades Estado: Solo detección, no explotación Resumen React2Shell PRO v2 es un script NSE avanzado de Nmap para detectar componentes de servidor Reac...

CVE-2026-21752 HCL Hive is affected by a use of vulnerable third-party components

HCL Hive is affected by a use of vulnerable third-party components which could allow an attacker unauthorized access or compromise of the system by exploiting publicly documented security flaws...