Amazon Linux 2 : unbound, --advisory ALAS2UNBOUND-1.17-2026-008 (ALASUNBOUND-1.17-2026-008)

The version of unbound installed on the remote host is prior to 1.17.0-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2UNBOUND-1.17-2026-008 advisory. NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that...

Cisco ASA/FTD WebVPN Double Free (CVE-2018-0101)

A vulnerability in the Secure Sockets Layer SSL VPN functionality of the Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to an attempt to double free a...

CVE-2026-51025

The CVE-2026-51025 entry relates to a Cross Site Scripting (XSS) flaw in the fuint Member Marketing System <= v1.0, enabling a remote attacker to execute arbitrary code via the ClientMessageController.java file. Connected sources (EUVD-2026-46139, NVD, CVE records, and third-party trackers) co...

CVE-2026-51025

Cross Site Scripting vulnerability in fuint Member Marketing System =v1.0 allows a remote attacker to execute arbitrary code via the ClientMessageController.java file...

The vulnerability of the SessionSecurityTokenHandler class in Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server allows a perpetrator to execute arbitrary code.

The vulnerability of the SessionSecurityTokenHandler class in Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deserialization mechanism flaws. Exploiting this vulnerability could allow an attacker to execute...

CVE-2026-51385

An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the validateurl, safefetch, buildopener, fetchhtml and downloadbinary functions...

PT-2026-61663

Name of the Vulnerable Software and Affected Versions Chamilo versions prior to 1.11.41 Description Authenticated users enrolled in a course, such as students, teachers, or DRH, can achieve remote code execution. The issue exists in the 'main/inc/ajax/lang.ajax.php' endpoint, which is only...

Cisco ASA IKEv1/IKEv2 Buffer Overflow (CVE-2016-1287)

A vulnerability in the Internet Key Exchange IKE version 1 v1 and IKE version 2 v2 code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code...

WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE

Description WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery SQL Injection CVE-2026-60137, could allow an attacker to perform SQL Injection and achieve Remote Code Execution...

PT-2026-61695

Name of the Vulnerable Software and Affected Versions Net::DNS versions prior to 1.56 Description Remote execution injection is possible via EDNS EXTENDED ERROR. The function decompose in Net::DNS::RR::OPT::EXTENDED ERROR parses the EXTRA-TEXT field of an EDNS EXTENDED-ERROR option by tokenizing...

CVE-2026-51385

GRAPHIFY by safishamsi (Open-Source) is affected in versions 0.3.2 through 0.4.29. The issue allows a remote attacker to execute arbitrary code via the functions validate_url, safe_fetch, _build_opener, _fetch_html, and _download_binary, indicating a potential code execution vulnerability within ...

Exploit for CVE-2026-63030

wp2shell: WordPress Batch RCE A technical breakdown of CVE-20...

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 stable and 1.31.3 mainline, and in NGINX Plus 37.0.3.1; anyone on an...

Exploit for CVE-2026-63030

wp2shell \CVE-2026-63030/CVE-2026-60137 Pre Authentication...

Exploit for CVE-2026-63030

CVE-2026-63030 — WordPress wp2shell Exploit Unauthenticated d...

Exploit for Eval Injection in Langflow

Langflow RCE Exploitation Framework CVE-2026-33017 · Auth...

NGINX ngx_http_ssi_module vulnerability

...

Exploit for CVE-2026-63030

wp2shell Pre-Authentication Remote Code Execution in WordPres...

OESA-2026-2981 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

MiracleLinux 9 : unbound-1.24.2-3.el9_8.1 (AXSA:2026-1303:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1303:08 advisory. unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options CVE-2026-42944 unbound: Unbound DNSSEC Validator Denial of Service...