CentOS 9 : pcre2-10.40-7.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the pcre2-10.40-7.el9 build changelog. - In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can...

Arbitrary File Read via Argument Injection in Configuration Search Utility

: An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration viewing commands with search pattern filters, the utility fails to sanitize user-supplied search...

SUSE SLES15: libpcre2-16-0 / libpcre2-32-0 / libpcre2-8-0 / libpcre2-posix2 / etc (SUSE-SU-2026:4458-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4458-1 advisory. - CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. - CVE-2026-89156:...

ALSA-2026:76760 Important: perl-DBI security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: perl-DBI: perl-DBI: Denial of...

PT-2026-107251

A heap-based buffer over-read in H5Z filter scaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies d nelmts size byte...

Important: perl-DBI security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: perl-DBI: perl-DBI: Denial of...

Security Advisory 0189

Security Advisory 0189 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release Description All CVEs covered in this advisory affect platforms running CloudVision Portal On-Premises, where insufficient validations in the Software Management...

Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command...

Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

Summary On Windows, a TemplateLookup URI beginning with a drive designator e.g. C:/../../secret.txt or C:....\secret.txt bypasses the directory traversal check in Template.init, allowing reads of files outside the configured template directory. This is a third, independent instance of the root...

GHSA-G7FW-3GJP-G5HF OpenClaw: Channel read actions could skip target allowlists

Summary Channel read actions could skip target allowlists. In affected versions, explicit read targets in Microsoft Teams, Feishu, Matrix, and Google Chat could reach channels or rooms outside the configured read policy. This advisory is scoped to caller-supplied targets for message, reaction, pi...

OpenClaw: Channel read actions could skip target allowlists

Summary Channel read actions could skip target allowlists. In affected versions, explicit read targets in Microsoft Teams, Feishu, Matrix, and Google Chat could reach channels or rooms outside the configured read policy. This advisory is scoped to caller-supplied targets for message, reaction, pi...

cve-2020-25540

ThinkAdmin: listado de directorios no autorizado / lectura arbitraria de archivos cve-2020-25540 Uso python3 cve-2020-25540.py url...

EUVD-2026-92876

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, packages/server/src/models/ApplicationModel.ts accepts a caller-chosen application authorization identifier, applications/:id/confirm binds that identifier to a logged-in use...

CVE-2023-1177

CVE-2023-1177 | | Path Traversal de MLFlow | Probado en MLflow 2.2.0 | src: https://github.com/iumiro/CVE-2023-1177-MLFlow | .. code-block:: bash !/bin/bash RAND="EXPLOIT-$1+$RANDOM%9999" URL="http://172.17.0.2:6001" FILE='/root/.ssh/idrsa' curl -vX POST...

CVE-2024-34693

CVE-2024-34693 Exploit Este repositorio contiene un script sofisticado en Python para explotar la vulnerabilidad CVE-2024-34693 en Apache Superset. El script configura un servidor MySQL falso y crea una conexión MariaDB maliciosa para exfiltrar el contenido de un archivo específico del sistema...

CVE-2026-14960-CVE-2026-14961

Vulnerabilidades de Escalada de Privilegios en el Controlador Pegatron TdeIo64 tdeio64.sys | ---|--- Identificadores CVE| CVE-2026-14960, CVE-2026-14961 Fabricante| Pegatron Corporation Producto| Controlador TdeIo tdeio64.sys Interfaz del Dispositivo| \.\TdeIo Tipos de Vulnerabilidad| Control de...

CVE-2025-29529

SQLi ITC Multiplan CVE-2025-29529 Descubrimiento El 21 de febrero de 2025, se identificó una vulnerabilidad de inyección SQL en la plataforma “Multiplan” desarrollada por ITC Systems durante un trabajo con un cliente. Versiones afectadas Esta vulnerabilidad solo se ha probado en v3.7.4.1002 Vecto...

CVE-2022-3699

CVE-2022-3699 Exploit de prueba de concepto para CVE-2022-3699 Exploit probado en Windows 10 22H2 build 19045.4651 y build 19045.3803 La vulnerabilidad permite a usuarios sin privilegios acceder a funcionalidad que permite leer y escribir desde la memoria física desde la instancia del kernel; sin...

NPM: vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

NPM: vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.6...

GHSA-4XHP-XG4W-8PPM Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend

Summary The ODF backend resolves the xlink:href of a draw:image element as a filesystem path whenever the referenced part is not found inside the document archive. The value comes straight from content.xml, so it is document content, and it is used with no scheme check, no confinement to the...