CVE-2026-106765

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

CVE-2026-106765

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

PHP 8.5.11 Multipart OOM Remote Code Execution

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain an out-of-memory request-parsing flaw that can lead to remote code execution. The proof of concept sends a chunked multipart request to reproduce the OOM bailout trigger. https://packetstorm.news/download/237279...

PHP 8.4.26 mod_php Remote Code Execution

PHP version 8.4.26 with modphp contains an out-of-memory handling vulnerability that allows unauthenticated remote command execution. The included proof of concept targets the PHP session upload-progress feature. https://packetstorm.news/download/237269...

AlmaLinux 8 : hplip (ALSA-2026:82295)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:82295 advisory. hplip: potential memory buffer overflow CVE-2020-6923 hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multipl...

Linux Distros Unpatched Vulnerability : CVE-2026-106547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow in H5VMarrayfill in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrar...

MiracleLinux 8 : dotnet8.0-8.0.132-2.el8_10.ML.1 (AXSA:2026-2120:20)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2120:20 advisory. dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability CVE-2026-58280 dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET...

Linux Distros Unpatched Vulnerability : CVE-2026-114094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-devel / etc (CENTOS7:CLSA-2026:1790603589)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1790603589 advisory. - GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu...

PHP 8.5.11 Remote Code Execution

PHP versions prior to 8.5.12, 8.4.27, 8.3.36, and 8.2.35 contain remote code execution vulnerabilities. This script performs behavioral checks for affected request parsing and session state handling...

SUSE SLED15: WebKitGTK-4.0-lang / WebKitGTK-4.1-lang / WebKitGTK-6.0-lang / etc (SUSE-SU-2026:4858-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4858-1 advisory. Security issues fixed: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 bsc1284619: - CVE-2024-1283:...

PHP 8.4.26 Remote Code Execution

PHP core versions after 5.4 contain a vulnerability that can result in remote code execution. This proof of concept targets PHP version 8.4.26 running as modphp with a prefork Apache configuration. !/usr/bin/env python3 """ Exploit credited to 9bie, adjusted using AI by OffSec php2shell - one-cli...

AlmaLinux 9.2 [TuxCare] Security Update: grafana Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792757203)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792757203 advisory. - Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive...

RockyLinux 9 : .NET 10.0 (RLSA-2026:86193)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:86193 advisory. dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability CVE-2026-102870 dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service...

Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x / 12.2.x Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, 12.1.x, or 12.2.x. It is, therefore, affected by multiple vulnerabilities. Palo Alto Networks is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619...

Alibaba Cloud Linux 3 : 0318: php (ALINUX3-SA-2026:0318)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0318 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-1218: The mysqlnd wire protocol...

Amazon Linux Unpatched Vulnerability : CVE-2026-109619

The remote Amazon Linux host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be...

Security Advisory 0200

Security Advisory 0200 . CSAF PDF Date: October 23, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 23, 2026 | Initial release 1.1 | October 26, 2026 | Added CloudVision Portal to platforms not affected and added CSAF file to advisory. Description Arista Networks is providing this securi...

Brotli Node.js Code Execution

The Brotli data compression algorithm vulnerability in the Node.js software platform is related to a lack of validation on return values. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

PT-2026-121839

Name of the Vulnerable Software and Affected Versions AgenticSeek versions prior to commit 409840c Description Remote code execution is possible because the llm server/app.py file hardcodes Flask debug mode while binding to all interfaces. An attacker who can access the server port and obtain the...