Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway

A flaw was found in FreeRDP. FreeRDP clients using TS Gateway are vulnerable to a heap-buffer-overflow. A malicious gateway can send a specially crafted response fragment, causing the client to write beyond its allocated buffer. This can lead to a client crash, resulting in a Denial of Service Do...

FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway

A flaw was found in FreeRDP. FreeRDP clients using TS Gateway are vulnerable to a heap-buffer-overflow. A malicious gateway can send a specially crafted response fragment, causing the client to write beyond its allocated buffer. This can lead to a client crash, resulting in a Denial of Service Do...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

CVE-2026-84154

The GEOVIA Geospatial Data Manager software, spanning Release 3DEXPERIENCE R2024x through R2026x , is impacted by a Code Injection vulnerability. This flaw could enable an attacker to execute arbitrary code on the server . While the vulnerability has a CRITICAL severity score of 9.9, the provided...

CVE-2026-84154 Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x

A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary code on the server...

CVE-2026-84154 Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x

A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary code on the server...

guardskill

GuardSkill A repository can make your coding agent run code the moment it opens the folder. GuardSkill checks for that before you do. npx guardskill . Read-only. No network calls, no telemetry, no configuration, no account, no dependencies. It reads git configuration and hook scripts, prints what...

CVE-2024-34361-Pi-Hole-SSRF-to-RCE

CVE-2024-34361 Удаленное выполнение кода Pi-hole SSRF to RCE Описание Этот репозиторий содержит эксплойт для CVE-2024-34361, критической уязвимости CVSS 8.6, обнаруженной в Pi-hole — DNS-синкхоле, широко используемом для блокировки рекламы и отслеживающих доменов на сетевом уровне. Уязвимость...

sharepoint-deserialization-security-assessment

CVE-2026-45659 - Désérialisation RCE sur Microsoft SharePoint Rapport de cybersécurité de style consultant Rapport d’évaluation professionnelle des vulnérabilités pour le risque de désérialisation SharePoint, incluant le résumé exécutif, l’impact technique, la remédiation et la stratégie...

CVE-2024-2887-REPORT

SSD Advisory – Удалённое выполнение кода в Google Chrome Источник: ssd-disclosure.com/ssd-advisory-google-chrome-rce Краткое описание Критическая уязвимость удалённого выполнения кода в Google Chrome версии 123 и ранее, затрагивающая обработку типов сборщика мусора WebAssembly WASM. Ошибка вызыва...

CVE-2026-91095

A flaw was found in proxygen. A remote attacker could cause a Denial of Service DoS or potentially execute arbitrary code by exploiting a use-after-free vulnerability. During WebTransport stream processing, internal handlers can return stream references that have already been deallocated and...

CVE-2026-91096

A flaw was found in proxygen. The WebTransport implementation fails to unregister read callbacks for closed streams before destroying them. This issue results in a use-after-free condition, where the transport attempts to invoke memory that has already been released. A remote attacker can exploit...

CVE-2026-86157

Progress Telerik Fiddler Everywhere versions prior to 8.2.0 are vulnerable to the exposure of privileged IPC functionality . A local, low-privileged attacker who can modify application launch parameters and influence a user to start the application can replace the UI or settings with attacker-con...

EUVD-2026-88648

Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled...

CVE-2026-86157 Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere

Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled...

CVE-2026-40897

CVE-2026-40897 Exécution de code à distance dans l'analyseur d'expressions Math.js ★ CVE-2026-40897 Exécution de code à distance dans Math.js PoC ★ https://github.com/user-attachments/assets/8c394039-f00a-4875-991a-fb5f40bc6898 Présentation CVE-2026-40897 est une vulnérabilité de contournement de...

CVE-2026-48095

CVE-2026-48095 7-Zip est un archiveur de fichiers offrant un taux de compression élevé. Les versions 26.00 et antérieures contiennent une vulnérabilité de débordement de tas heap buffer overflow causée par une sous-allocation dans le tampon du flux compressé NTFS décalage UB de GetCuSize,...

rwsploit

Сканер Oracle Reports rwservlet ⚠️ Только для авторизованного использования. Запускайте этот инструмент только против систем, которыми вы владеете или на тестирование которых имеете явное письменное разрешение. Неавторизованное использование незаконно. Сфокусированный эксплуатационный сканер для...

CVE-2026-44789-n8n-PrototypePollution-RCE

CVE-2026-44789 — Pollution de prototype par pagination du nœud HTTP Request de n8n → RCE Un créateur de workflow n8n L'avis public indique seulement que la pollution "combinée à d'autres techniques pourrait conduire à une RCE" — il ne divulgue pas de gadget. Ce dépôt documente et automatise une...