PT-2026-106145

Name of the Vulnerable Software and Affected Versions WifiPermissionsUtil.java affected versions not specified Description A missing permission check in the isSystem function of WifiPermissionsUtil.java allows for a possible sandbox escape. This issue can lead to local escalation of privilege...

PT-2026-106247

Name of the Vulnerable Software and Affected Versions Docling versions 2.94.0 through 2.131.0 Description When users enable LatexBackendOptionstikz engine="tectonic", the system uses docling/backend/latex/engines/tectonic.py to compile TikZ bodies and document preambles without restricting TeX fi...

AlmaLinux 9.2 [TuxCare] Security Update: webkit2gtk3 / webkit2gtk3-devel / webkit2gtk3-jsc / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791208722)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791208722 advisory. - Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer proce...

CVE-2026-105744: Improper Limitation of a Pathname to a Restricted Directory

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptionstikzengine="tectonic" invoke docling/backend/latex/engines/tectonic.py to compile an untrusted TikZ bo...

metasploitable2-privilege-escalation

Task 05 — Privilege Escalation Zyroo Cybersecurity Internsh...

exploit-js2py

CVE-2024-28397 - الهروب من الصندوق الرملي في js2py الوصف تؤثر ثغرة CVE-2024-28397 على إصدارات js2py حتى v0.74، وهي مكتبة بايثون تتيح تنفيذ كود جافا سكريبت داخل مفسّر بايثون. يكمن الخلل في تنفيذ الطريقة disablepyimport، التي يفترض أن تمنع كود جافا سكريبت من الوصول إلى كائنات بايثون. ومع ذلك، وبسبب...

CVE-2026-27626-POC

CVE-2026-27626: OliveTin 비밀번호 인자 명령 주입 OliveTin은 관리자가 "actions"사용자가 웹 UI 또는 API에서 트리거할 수 있는, 매개변수화된 인자를 가진 셸 명령을 정의할 수 있게 해줍니다. OliveTin은 사용자가 제공한 값을 셸 명령에 템플릿화하기 전에 checkShellArgumentSafety를 통해 검사해야 합니다. 이 함수는 string, int, bool, choice의 네 가지 인자 유형을 검사합니다. password는 완전히 건너뛰고 값은 전혀 보지 않은 채 "안전함"을...

CVE-2026-103626

An incorrect authorization flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553114097...

CVE-2026-103628

An out of bounds write flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/549995090...

Fedora 44 : buildstream (2026-ccf62cb9b3)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ccf62cb9b3 advisory. CVE-2026-82331 CWE-59: tar source plugin symlink escape while fetching a malicious tarball Python = 3.12, so the packaged /usr/bin/bst was already using...

Fedora 43 : buildstream (2026-e14ea5695c)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e14ea5695c advisory. CVE-2026-82331 CWE-59: tar source plugin symlink escape while fetching a malicious tarball Python = 3.12, so the packaged /usr/bin/bst was already using...

CVE-2026-95381

An improper input validation flaw was found in the Printing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/497603247...

CVE-2026-103630

An use after free flaw was found in the FedCM component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/557323166...

CVE-2026-103624

An use after free flaw was found in the Contextual Tasks component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/561660166...

Security Bulletin: Langflow OSS is affected by multiple vulnerabilities

Summary Langflow OSS is affected by multiple vulnerabilities involving code-execution restrictions, access controls, sensitive-data handling, file access, and archive processing. Depending on deployment configuration, an attacker could execute code, read or modify data without authorization,...

CVE-2026-92955

A flaw was found in vm2. This vulnerability allows an attacker running untrusted code within the sandbox to achieve arbitrary code execution on the host system. By accessing internal host properties through standard output streams, the untrusted code can manipulate process event handlers and esca...

CVE-2026-94422

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

CVE-2026-94422 xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

CVE-2026-94422 xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

CVE-2026-94422 xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...