3099150 matches found
Budibase 3.31.4 Authentication Bypass / Remote Code Execution
Budibase versions through 3.31.4 contain an authentication and authorization bypass vulnerability that allows an unauthenticated remote attacker to access protected API endpoints by placing a webhook route pattern in the request query string. This proof of concept first verifies the bypass agains...
PHP BCMath 8.5.8 Remote Code Execution
PHP BCMath versions 8.4.0 through 8.4.23 and 8.5.0 through 8.5.8 contain an out-of-bounds write vulnerability in bcstr2num. The issue can be leveraged from an existing PHP code execution context to corrupt Zend heap metadata, establish arbitrary memory access, resolve native PHP function handlers...
Securing AI-Generated Code: A Just-In-Time Vulnerability Detection and Remediation Pipeline
AI-assisted development tools generate vulnerable code at significant rates, yet few automated mechanisms exist to detect, enrich, fix, and verify security issues at development velocity, particularly ones that ground remediation in real-world threat context. This paper presents an automated...
Microsoft SharePoint Server SecurityContextToken Deserialization Remote Code Execution
Microsoft SharePoint Server contains an unauthenticated deserialization vulnerability in the /trust/default.aspx WS-Federation endpoint that can allow remote code execution through a crafted SecurityContextToken cookie. This proof of concept uses a BinaryFormatter TypeConfuseDelegate payload...
Important: pcp
Issue Overview: A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root. CVE-2026-16526 A signed integer overflow in the PCP pmGetPDU function can be...
Important: dotnet9.0
Issue Overview: Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network. CVE-2026-47303 Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-76822
Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions DSOP values to ServerProxy::setOptions in src/lib/client/ServerProxy.cpp so that the value following a modifier option poisons m...
PT-2026-76781
FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, src/App/PropertyPythonObject.cpp in PropertyPythonObject::Restore passes the attacker-controlled module attribute from serialized PropertyPythonObject XML directly to PyImport ImportModule while restoring a...
PT-2026-76780
FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable...
About the security content of iOS 26.6.1 and iPadOS 26.6.1
About the security content of iOS 26.6.1 and iPadOS 26.6.1 This update delivers security fixes that were first made available in the iOS 27 and iPadOS 27 betas. This document describes the security content of iOS 26.6.1 and iPadOS 26.6.1. About Apple security updates For our customers' protection...
CVE-2026-38165
A Server-Side Template Injection SSTI vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrary code via a crafted expression...
CVE-2026-38165
A Server-Side Template Injection SSTI vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrary code via a crafted expression...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100138)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100138 advisory. In the Linux kernel, the following vulnerability has been resolved: net: consume xmit errors of GSO frames udpgrofrglist.sh and udpgrobench.sh are the flakiest tests...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100140)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100140 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cpu timers requires an additional step beyond...
Unity Linux 20.1070e Security Update: edk2 (UTSA-2026-099522)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099522 advisory. Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer...
Oracle Linux 10 : gstreamer1-plugins-bad-free (ELSA-2026-55433)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-55433 advisory. - Fix ADPCM decoder input validation CVE-2026-19387 Resolves: RHEL-235500 - Fix rfbsrc hextile and color read handling for non-32bpp pixel formats...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099722)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099722 advisory. In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6tnl.net in vti6changelink. ip netns add ns1 ip netns add ns2 ip -n ns1 link add...
RockyLinux 10 : gstreamer1-plugins-bad-free (RLSA-2026:55433)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:55433 advisory. gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder CVE-2026-19387 Tenable has extracted the preceding...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100177)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100177 advisory. In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rosertdevicedown There are two bugs in rosertdevicedown...
Oracle Linux 9 : 389-ds-base (ELSA-2026-55423)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55423 advisory. - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check rhel-9.8.z - Resolves:...