EulerOS 2.0 SP11 : docker-engine (EulerOS-SA-2026-4314)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privileg...

EulerOS 2.0 SP11 : bison (EulerOS-SA-2026-4305)

According to the versions of the bison packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in GNU Bison affected version not known and classified as critical. Affected by this issue is the function execvp of the...

Linux Distros Unpatched Vulnerability : CVE-2026-108752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by...

EulerOS 2.0 SP11 : gzip (EulerOS-SA-2026-4325)

According to the versions of the gzip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the...

EulerOS 2.0 SP13 : gzip (EulerOS-SA-2026-4143)

According to the versions of the gzip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the...

Amazon Linux 2 : apache-ivy (ALAS-2026-3993)

The version of apache-ivy installed on the remote host is prior to 2.3.0-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3993 advisory. The PackagerResolver of Apache Ivy is able to download onlineartifacts and to repackage them in a format defined by apackager.xm...

EulerOS 2.0 SP11 : bison (EulerOS-SA-2026-4214)

According to the versions of the bison packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in GNU Bison affected version not known and classified as critical. Affected by this issue is the function execvp of the...

EulerOS 2.0 SP11 : docker-engine (EulerOS-SA-2026-4223)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privileg...

dirtypipez-exploit

Exploit DirtyPipe CVE-2022-0847. Crédito: Max Kellermann [email protected] Una nueva vulnerabilidad de Linux conocida como 'Dirty Pipe' permite a usuarios locales obtener privilegios de root a través de exploits disponibles públicamente. Hoy, el investigador de seguridad Max Kellermann divul...

CVE-2026-108872 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/batchEditUsers

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers handler of SysUserController that allows any authenticated user to edit user department assignments. Low-privileged attackers can send PUT requests to /sys/user/batchEditUsers with arbitrary user and...

CVE-2026-108759

mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input path...

DEBIAN-CVE-2026-108752

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username. Attackers holding a name like alice-prod can overwrite the client for alice's server prod, breaking...

CVE-2026-108752

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username. Attackers holding a name like alice-prod can overwrite the client for alice's server prod, breaking...

CVE-2026-108751

MoAI-ADK through 3.1.2 contains an improper link resolution vulnerability in the moai init template deployer that allows malicious repositories to overwrite files outside the project via a symlinked .moai-tmp staging path. Attackers can commit a symlink such as .claude/settings.json.moai-tmp so...

CVE-2026-108752

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username. Attackers holding a name like alice-prod can overwrite the client for alice's server prod, breaking...

UBUNTU-CVE-2026-108752

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username. Attackers holding a name like alice-prod can overwrite the client for alice's server prod, breaking...

CVE-2026-108759 mistral.rs 0.9.0 through 0.9.4 Sandbox Escape via Symlink Following in mistralrs-code-exec

mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input path...

CVE-2026-108759

Versions 0.9.0 through 0.9.4 of mistral.rs are vulnerable to a sandbox escape via a link following vulnerability in the mistralrs-code-exec component. The root cause is improper link resolution (CWE-59), which allows sandboxed shell code to read and overwrite files outside the designated sandbox ...

CVE-2026-108759

mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input path...

EUVD-2026-96924

mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input path...