ROS-20260911-73-0132

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created video file...

ROS-20260911-73-0142

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to errors in HTTP requests processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a malicious file...

PT-2026-90498

Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the Document Library block, so a user with permission to edit file properties could store a script payload that executed in the browser of any visitor to a page displaying the block...

CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22_ 10.0 < 10.10_ 11.0 < 11.3 - RCE

!/usr/bin/env python3 Exploit Title: ILIAS save$this-filename - fileputcontents$filename, jsonencode$cookies. Attacker-chosen path + JSON-embedded PHP = webshell. Tested: ILIAS 10.9 on Rocky Linux 9 Apache + PHP-FPM 8.2, MariaDB bac...

ROS-20260911-73-0121

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created video file...

PT-2026-90546

Title Missing authorization on Media sub-form store action allows unpermissioned product media update Description A lack of authorization control on the store method was found in packages/admin/src/Livewire/Components/Products/Form/Media.php. The security fix released for GHSA-h4mp-g9c6-xwph adde...

PT-2026-90543

Summary Five Filament groupedBulkActions blocks across the Shopper admin Livewire pages omit the -authorize... permission gate, while their per-record sibling actions and other Shopper Index pages such as Pages/Settings/Currencies.php, Pages/Reviews/Index.php, Pages/Collection/Index.php, and...

CVE-2026-88046

rclone is a command-line program to sync files and directories to and...

CVE-2026-88045

rclone is a command-line program to sync files and directories to and...

PT-2026-90403

In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure nfsd file do acquire does not use a non-opened file -atomic open is permitted to return success without actually opening the file. It indicates this by calling finish no open. This means dentry create can return a fi...

PT-2026-90431

In the Linux kernel, the following vulnerability has been resolved: NFS/localio: fix ref leak on nfs uuid add file failure When nfs uuid add file races with nfs uuid put tearing down uuid-net, it returns -ENXIO without publishing nfl-nfs uuid via rcu assign pointer. nfs open local fh then enters...

PT-2026-89904

MoguBlog through 6.2 contains an authorization bypass vulnerability in the POST /pictureSort/getPictureSortByUid endpoint, which omits the @AuthorityVerify annotation required to enforce role-based permissions. Authenticated back-office users without image-category permissions can supply a catego...

PT-2026-90048

Concrete CMS 9 through 9.5.2 is vulnerable to Server-Side Template Injection SSTI in Theme Customizer via Unvalidated Style Values. Values submitted through the customizer color channels and other style properties handled by ColorStyle and sibling Style classes such as FontFamilyStyle and...

PT-2026-90461

In the Linux kernel, the following vulnerability has been resolved: debugfs: Fix lockdown check for mmap prepare Commit 651fdda8406d "relay: update relay to use mmap prepare" changed the mmap file operation to mmap prepare for relayfs, but the lockdown check in debugfs was not updated accordingly...

PT-2026-90494

Concrete CMS Area API's block-create endpoint in versions 9.2.0 to 9.5.2 did not invoke the block type controller's validate method on submitted data, which, for file-referencing blocks such as hero image and gallery, is where the referenced file is authorized against the user's file-manager...

CVE-2025-69904

Linkstack v4.8.4 and earlier is affected by a Path Traversal vulnerability. An administrator with access to the application can read arbitrary files on the server by manipulating file path input, potentially gaining unauthorized access to sensitive system or application files. No specific patch v...

PT-2026-90050

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. A logic flaw in GetSimple CMS v3.4.0a and below and GetSimpleCMS-CE v3.3.22 and below allows unauthenticated attackers to create a new administrator account. The application features an...

CVE-2026-88016

rclone is a command-line program to sync files and directories to and...

PT-2026-90394

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix partial-write detection in nfsd direct write nfsd direct write walks a list of write segments and, after each vfs iocb iter write, tries to detect a short write so the loop can stop before placing the next segment at a...

PT-2026-90355

In the Linux kernel, the following vulnerability has been resolved: cifs: use cifs invalidate cache in cifs do truncate for O TRUNC cifs do truncate is invoked from cifs open without i rwsem, so it cannot use cifs resize file locked to perform a proper fscache cookie resize. Instead, add cifs...