Plex Media Server has a vulnerability related to input validation errors.

Versions of Plex Media Server prior to 1.43.3.10861 contain a vulnerability related to input validation errors. This vulnerability arises from the TranscoderH264Options preference being appended to the x264 option string unchanged, and because all .so files are executed without signature, executi...

CVE-2026-70611 Electron: DevTools embedder handler executes arbitrary files via shell open

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.1, and 42.0.0-beta.3, the DevTools reveal in file manager action could launch the target file rather than reveal it. An attacker with a separate means of running...

Astra Linux – vulnerability in libssh

A malicious SCP server can send unexpected paths that may cause the client application to override local files outside of its working directory. This could be exploited to create malicious executables or configuration files, which the user would then execute, resulting in specific consequences...

CVE-2026-34184

Hydrosystem Control System does not enforce authorization for some directories. This allows an unauthorized attacker to read all files in these directories and even execute some of them. Critically the attacker could run PHP scripts directly on the connected database.This issue was fixed in...

Termix security vulnerability

Termix is a server management platform developed by Karmaa’s individual developers. Versions of Termix prior to 2.3.2 contained security vulnerabilities. These vulnerabilities stemmed from the lack of verification by 16 file manager endpoints to ensure that the requesting user had an SSH session...

PT-2026-31600

Name of the Vulnerable Software and Affected Versions Hydrosystem Control System versions prior to 9.8.5 Description The Hydrosystem Control System does not properly enforce authorization for certain directories. This allows an unauthorized attacker to read all files within these directories and...

PT-2025-45132

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express Unified CCX affected versions not specified Description A flaw exists in the web interface of Cisco Unified CCX that may allow a remote attacker with valid administrative credentials to upload and execute...

EUVD-2007-5050

Malware in sbrugna...

EUVD-2007-1927

Malware in sbrugna...

EUVD-2012-1146

Malware in sbrugna...

EUVD-2009-1499

Malware in sbrugna...

EUVD-2005-1307

Malware in sbrugna...

EUVD-2007-4359

Malware in sbrugna...

EUVD-2020-25285

Malware in sbrugna...

EUVD-2023-36977

Malicious code in bioql PyPI...

GHSA-PH6W-F82W-28W6 Claude Code Vulnerable to Arbitrary Code Execution Due to Insufficient Startup Warning

When Claude Code was started in a new directory, it displayed a warning asking, "Do you trust the files in this folder?". This warning did not properly document that selecting "Yes, proceed" would allow Claude Code to execute files in the folder without additional confirmation. This may not have...

AVEVA PI Integrator code-related vulnerabilities

AVEVA PI Integrator is a business analysis tool from AVEVA UK. AVEVA PI Integrator suffers from a code issue vulnerability that originates from an authenticated attacker who could upload and execute files...

PT-2025-33460 · WordPress · Bizcalendar Web

Name of the Vulnerable Software and Affected Versions: BizCalendar Web plugin for WordPress versions prior to 1.1.0.51 Description: The BizCalendar Web plugin for WordPress is vulnerable to Local File Inclusion via the bizcalv shortcode. Authenticated attackers with Contributor-level access and...

CVE-2023-31448

A path traversal vulnerability was identified in the HL7 sensor in PRTG 23.2.84.1566 and earlier versions where an authenticated user with write permissions could trick the HL7 sensor into behaving differently for existing files and non-existing files. This made it possible to traverse paths,...

Contao code-related vulnerabilities

Contao is an open source Content Management System CMS developed in PHP by Contao Open Source. The system supports search engines, rights management, and CSS frameworks. A code issue vulnerability exists in Contao 4.0.0 and prior versions, which originates from a backend user with file manager...