Security Bulletin: Due to the use of Jackson Core and Jackson Databind, multiple vulnerabilities are found in CICS Transaction Gateway Desktop Edition.

Summary Due to the use of Jackson Core and Jackson Databind, CICS Transaction Gateway Desktop Edition is vulnerable to Uncontrolled Resource Consumption CVE-2026-89407, CVE-2026-89425, CVE-2026-68497, CVE-2026-91776, CVE-2026-91777, Deserialization of Untrusted Data CVE-2026-83557 and Use of...

Exploit for Code Injection in Vmware Spring_Framework

CVE-2022-22965 Spring4Shell: Vulnerability Analysis Name:...

CVE-2026-110370

Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins for Pinterest: from n/a through 1.9.2...

CVE-2026-110369

Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members – GS Plugins: from n/a through 2.8.2...

Security update for poppler

This update for poppler fixes the following issues: CVE-2026-93313: JBIG2 stream processing can cause integer overflows bsc1282532. CVE-2026-93314: TrueType font processing can cause integer overflows bsc1282531. CVE-2026-102620: Data corruption via integer overflow in FoFiTrueType:cvtSfnts...

China-Based BRONZE SANDCASTLE Hackers Abuse Sandboxie to Load Backdoors

Sophos found BRONZE SANDCASTLE abusing legitimate Windows apps to load encrypted backdoors, collect system information and steal Active…...

Denial-Of-Service (DoS)

io.netty, netty-codec-http3 is vulnerable to a denial-of-service DoS. The vulnerability is due to unbounded processing of continuation bytes, which allows a remote, unauthenticated attacker to exhaust heap memory and consume excessive CPU resources by sending malformed QPACK data, potentially...

Vulnerabilities are managed in Oracle Enterprise Manager

Oracle has identified several vulnerabilities in Oracle Enterprise Manager, including the Base Platform, Data Guard Management, Siebel, and Virtualization components. These vulnerabilities affect versions 13.5 and 24.1. The vulnerabilities in Oracle Enterprise Manager can lead to unauthorized...

AZL-109935 CVE-2026-114236 affecting package containerized-data-importer 1.62.0-9

storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit...

Exploit for CVE-2026-88901

CVE-2026-88901 — camel-smooks: XML External Entity XXE proce...

EUVD-2026-107158

Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members – GS Plugins: from n/a through 2.8.2...

CVE-2026-110370 WordPress GS Pins for Pinterest plugin <= 1.9.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins for Pinterest: from n/a through 1.9.2...

CVE-2026-110369 WordPress WordPress Team Members – GS Plugins plugin <= 2.8.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members – GS Plugins: from n/a through 2.8.2...

EUVD-2026-107157

Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins for Pinterest: from n/a through 1.9.2...

CVE-2026-110369 WordPress WordPress Team Members – GS Plugins plugin <= 2.8.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members – GS Plugins: from n/a through 2.8.2...

CVE-2026-110370

The GS Pins for Pinterest WordPress plugin (versions

CVE-2026-110370 WordPress GS Pins for Pinterest plugin <= 1.9.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins for Pinterest: from n/a through 1.9.2...

CVE-2026-110369

The WordPress Team Members – GS Plugins (gs-team-members) plugin is vulnerable to a PHP Object Injection flaw in versions

Vulnerabilities in Oracle PeopleSoft Enterprise

Oracle has identified new vulnerabilities in Oracle PeopleSoft Enterprise. These vulnerabilities relate to various security risks, including unauthorized access to data, unauthorized modification of data, and disruption of system availability denial-of-service attacks. Depending on the specific...

BIT-MYSQL-CLIENT-2026-92262 MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql50 bypass prefix is affected because it allows the mysql50 prefix to bypass normal table-name filesystem encoding. An attacker can trigger the issue wit...