268039 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-19145
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML pag...
Linux Distros Unpatched Vulnerability : CVE-2026-43631
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server when the --sleep-idle-seconds featu...
Linux Distros Unpatched Vulnerability : CVE-2026-70632
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD CFHD decoder that allow...
Linux Distros Unpatched Vulnerability : CVE-2026-64638
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an...
Linux Distros Unpatched Vulnerability : CVE-2026-19168
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted...
Python Library Django 5.2.x < 5.2.17 / 6.0.x < 6.0.8 Multiple Vulnerabilities
The detected version of the Django Python package is 5.2.x prior to 5.2.17 or 6.0.x prior to 6.0.8. It is, therefore, affected by multiple vulnerabilities, including: - GeoDjango spatial lookups pass untrusted input to the GDALRaster constructor, allowing an attacker to write arbitrary files via ...
Linux Distros Unpatched Vulnerability : CVE-2026-19150
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted...
📄 WordPress WP2Shell SQL Injection / Remote Code Execution
This Metasploit module chains two WordPress core vulnerabilities, together known as WP2Shell, to gain unauthenticated remote code execution against default installs of WordPress 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1. The vulnerabilities are fixed in WordPress 6.9.5 and 7.0.2. CVE-2026-60137...
Langflow 1.x.x < 1.10.1 Code Injection
The version of Langflow installed on the remote host is 1.x.x prior to 1.10.1. It is, therefore, affected by a code injection vulnerability: - IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/autologin mints SUPERUSER tokens to any network caller with...
PT-2026-69125
Name of the Vulnerable Software and Affected Versions HKUDS nanobot versions prior to 0.3.0 Description An OS command injection flaw exists in the Shell Allowlist Handler component within the nanobot/agent/tools/shell.py file. The issue resides in the ExecTool. guard command and ExecTool. spawn...
PT-2026-70005
Name of the Vulnerable Software and Affected Versions TrueConf Server affected versions not specified Description An issue exists where a critical undocumented function lacks authentication. A remote attacker connecting via port 4307/TCP can invoke this function to execute an arbitrary script on...
Linux Distros Unpatched Vulnerability : CVE-2026-19162
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-19174
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
CVE-2026-50515 Azure Service Bus Remote Code Execution Vulnerability
...
CVE-2026-50515 Azure Service Bus Remote Code Execution Vulnerability
...
CVE-2026-50515
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-50515
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...
CVE-2026-68823
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...
CVE-2026-68823
Azure Confidential Ledger is affected by CVE-2026-68823, a remote code execution vulnerability caused by an exposed dangerous method/function. An authorized attacker could exploit this over the network to execute code. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H with a bas...