flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is...

Important: Red Hat Security Advisory: flatpak security update

An update for flatpak is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc

A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host system files such as passwd, group, machine-id, or resolv.conf to be emptied or replaced with a symlink when the app is installed or upgraded...

btcpay-greenfield-2fa-bypass

Check · Exploit · Detection · PCAP · Impact · Write-up...

CVE-2026-111037 Multiple vulnerabilities in Coupa’s Total Spend Management Platform

A reflected Cross-Site Scripting XSS vulnerability in the Tenders module of the Coupa Supplier Portal SaaS platform. The vulnerability arises because the listitemfunction parameter is reflected in the server’s response without proper output encoding or sanitisation, and is directly embedded withi...

CVE-2026-111037 Multiple vulnerabilities in Coupa’s Total Spend Management Platform

A reflected Cross-Site Scripting XSS vulnerability in the Tenders module of the Coupa Supplier Portal SaaS platform. The vulnerability arises because the listitemfunction parameter is reflected in the server’s response without proper output encoding or sanitisation, and is directly embedded withi...

CVE-2026-115498 Slim Jetpack <= 2.7.0.1 - Unauthenticated Stored Cross-Site Scripting via Contact Form 'Website' Field

The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'g-website Website contact-field' parameter in all versions up to, and including, 2.7.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-115498 Slim Jetpack <= 2.7.0.1 - Unauthenticated Stored Cross-Site Scripting via Contact Form 'Website' Field

The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'g-website Website contact-field' parameter in all versions up to, and including, 2.7.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-93900 Simple CAPTCHA with Cloudflare Turnstile <= 1.44.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Simple CAPTCHA with Cloudflare Turnstile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the gravity-simple-turnstile shortcode in versions up to, and including, 1.44.3 This is due to insufficient input sanitization and output escaping on the...

CVE-2026-93900 Simple CAPTCHA with Cloudflare Turnstile <= 1.44.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Simple CAPTCHA with Cloudflare Turnstile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the gravity-simple-turnstile shortcode in versions up to, and including, 1.44.3 This is due to insufficient input sanitization and output escaping on the...

CVE-2026-110935 Path traversal in plug-in deployment

The PFI plugin framework is vulnerable to a path traversal flaw during the deployment routine. The software fails to validate path components when extracting archive entries to the local plugin repository, specifically failing to reject relative path segments like '..' . This allows an unauthenti...

CVE-2026-110935 Path traversal in plug-in deployment

The PFI plugin framework deployment routine does not validate path components when extracting archive entries to the local plugin repository. Archive entries containing relative path segments such as '..' are not rejected, allowing an unauthenticated local attacker to write files outside the plug...

CVE-2026-110022 Signed plug-in validation bypass

The PFI plugin framework contains a signed plug-in validation bypass (CVE-2026-110022). The vulnerability exists because the deployment routine processes archive entries that are not covered by signature verification . An unauthenticated local attacker can include an unsigned DLL in a signed plug...

CVE-2026-110022 Signed plug-in validation bypass

The PFI plugin framework deploys executable assemblies DLLs from a signed plugin package into the local plugin repository and loads them via reflection, but the deployment routine processes archive entries that were never covered by the signature verification. An unauthenticated local attacker ca...

CVE-2026-114424

SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient replacement rules. An unauthenticated remote sender can execute operating-system commands in the mail-processing worker context when an active rule uses message-derive...

CVE-2026-95649 IRISPowerscan Insufficient restriction of untrusted scripts allows arbitrary code execution

IRISPowerscan insufficiently restrict the use of untrusted scripts. An authenticated user with access to script functionality can import or modify scripts that are executed by the application, potentially resulting in arbitrary code execution in the security context of the Windows user running...

CVE-2026-95649 IRISPowerscan Insufficient restriction of untrusted scripts allows arbitrary code execution

The software IRISPowerscan contains a vulnerability caused by the insufficient restriction of untrusted scripts . An authenticated user with access to script functionality can import or modify scripts that are subsequently executed by the application. This flaw can lead to arbitrary code executio...

RLSA-2026:94514 Important: freerdp security, bug fix, and enhancement update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: freerdp: FreeRDP: Denial of Service via uninitialized progressive tile...

RLSA-2026:94519 Important: raptor2 security update

Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security Fixes: raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling CVE-2025-71436 For more details about the...

wafaray

Enhance your malware detection with WAF + YARA WAFARAY WAFARAY is a LAB deployment based on Debian 11.3.0 stable x64 made and cooked between two main ingredients WAF + YARA to detect malicious files e.g. webshells, virus, malware, binaries typically through web functions upload files. -blue.svg...