PT-2026-89844

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in confirmLivePassword.php that copies REQUEST URI into a form action attribute without encoding. Attackers can craft a malicious URL with a quote character to break out of...

CVE-2025-69904

Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to read arbitrary files on the server by manipulating file path input. Successful exploitation may lead to unauthorized access to sensitive system or application files...

PT-2026-89753

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.28.1 via the 's', 'post types', and 'orderby' request parameters. This is due to insufficient input sanitization and output escaping in the relevanssi debug...

CVE-2026-79393

A heap-based buffer overflow in the WS-Addressing Action transformation function of the Sofia IPC daemon in Xiongmai IP Camera XM530 (firmware HMT.CM2005-v220608.1837 and earlier) allows remote unauthenticated attackers to trigger a denial of service or potentially execute arbitrary code by sendi...

PT-2026-90060

In the Linux kernel, the following vulnerability has been resolved: tpm: tpm i2c nuvoton: disable IRQ on wait timeout i2c nuvoton wait for stat enables the IRQ before waiting for the interrupt handler to report a status change. If the wait times out, or is interrupted before the handler runs, the...

PT-2026-89805

🚨 CYBER ESPIONAGE — UNC3569 TURNED ONE SOGOU INPUT METHOD CLICK INTO A WINDOWS BACKDOOR A custom URI handler + an outdated embedded Chromium environment ultimately enabled deployment of GRAYRABBIT. CyberSignal Priority: 🔴 VERY HIGH 🇨🇳 UNC3569 ⌨️ Sogou Input Method CVE-2026-51990 🦠 GRAYRABBIT 🔎 What...

PT-2026-90433

In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram destroy comps Patch series "zram: fix zram issues reported by sashiko". Sashiko drove by and reported 1 a couple of zram issues: a possible BUG ON in zlib code due to missing winbits...

PT-2026-90305

In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use raw spinlock t for CXL CPER work locks The CXL CPER work registration and unregistration helpers acquire cxl cper work lock and cxl cper prot err work lock with a spinlock guard, which leaves local interrupts...

ROS-20260911-73-0172

The vulnerability of the Font component in Google Chrome’s Linux operating system lies in the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

ROS-20260911-73-0232

The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-90135

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration try smi init allocates new smi-si sm and later calls ipmi register smi mod, which maps to ipmi add smi. During ipmi add smi, the upper IPMI message handler obtains...

PT-2026-89884

Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the java keystore passwd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which ...

ROS-20260911-73-0246

The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

RHEL 10 : osbuild-composer (RHSA-2026:66432)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66432 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : KissFFT vulnerabilities (USN-8745-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8745-1 advisory. It was discovered that KissFFT incorrectly handled certain large Fourier transform sizes on 32-bit architectures. An attacker cou...

AlmaLinux 10 : vim (ALSA-2026:66336)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:66336 advisory. vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Service vi...

The vulnerability of the Python omni-completion module’s autoload mechanism, runtime/autoload/python3complete.vim, allows a hacker to execute arbitrary code.

The vulnerability of the Python omni-completion module’s autoload mechanism, located in the runtime/autoload/python3complete.vim file, is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the netrw text editor plugin in Vim allows a hacker to execute arbitrary code.

The vulnerability of the netrw text editor plugin in Vim is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the DirectShow component in Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the DirectShow component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the HTTP Print Provider component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the HTTP Print Provider component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...