Linux Distros Unpatched Vulnerability : CVE-2026-85748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYSREFCURSOR handling is affected because cursor-array...

PHP 8.3.36 CentOS 7 Security Update

PHP version 7.4.33 and version 8.3.36 CentOS 7 packages include fixes for two remote code execution vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-114094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a...

CVE-2026-106763

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to achieve arbitrary code execution . The vulnerability originates within the escapeShellString and sanitizeCode functions. The documents do not provide specific details regarding remediation or evidence of in-the-wild ex...

UBUNTU-CVE-2026-102483

Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote atta...

AlmaLinux 8 : hplip (ALSA-2026:82295)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:82295 advisory. hplip: potential memory buffer overflow CVE-2020-6923 hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multipl...

Tenable Security Center Multiple Vulnerabilities (TNS-2026-28)

According to its self-reported version, the Tenable Security Center running on the remote host is 6.9.1 or earlier and missing security patch SC-202610.1. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-28 advisory. - PHP uses longjmp for out-of-memory OOM...

JetBrains TeamCity 2026.1.2 Agent Polling Remote Code Execution

JetBrains TeamCity versions before 2026.1.3 and 2025.11.7 contain an unauthenticated agent-polling protocol deserialization vulnerability that allows remote code execution. https://packetstorm.news/download/237301...

Apache ActiveMQ 5.18.2 OpenWire Remote Code Execution

Apache ActiveMQ versions before 5.15.16, 5.16.7, 5.17.6, and 5.18.3 contain an OpenWire deserialization flaw that allows unauthenticated remote code execution. This proof of concept sends a crafted ExceptionResponse frame. https://packetstorm.news/download/237303...

PYSEC-2026-4322 Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

CVE-2026-111497 "Node2Shell" is an out-of-bounds write CWE-787 in Google's Brotli decoder c/dec/decode.c. DecodeBlockTypeAndLength returns an ambiguous value for an invalid block switch, and the fast decode path discards it CWE-252, unchecked return value, so a crafted Brotli stream makes the...

PYSEC-2026-4323 Out-of-bounds write in the brotlicffi decoder ("Node2Shell") also affects the PyPI Brotli package

CVE-2026-111497 "Node2Shell" is an out-of-bounds write CWE-787 in Google's Brotli decoder c/dec/decode.c. DecodeBlockTypeAndLength returns an ambiguous value for an invalid block switch, and the fast decode path discards it CWE-252, unchecked return value, so a crafted Brotli stream makes the...

Brotli Node.js Code Execution

The Brotli data compression algorithm vulnerability in the Node.js software platform is related to a lack of validation on return values. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x / 12.2.x Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, 12.1.x, or 12.2.x. It is, therefore, affected by multiple vulnerabilities. Palo Alto Networks is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619...

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

CVE-2026-111497 "Node2Shell" is an out-of-bounds write CWE-787 in Google'sBrotli decoder c/dec/decode.c. DecodeBlockTypeAndLength returns an ambiguousvalue for an invalid block switch, and the fast decode path discards itCWE-252, unchecked return value, so a crafted Brotli stream makes the...

Vaadin and the October 2026 Node.js security releases

A deployed Vaadin application does not run Node.js, so it is not exposed to the vulnerabilities fixed in the Node.js security releases of 21 October 2026. Vaadin uses Node.js only to build the frontend and to run development mode, which means the exposure, where there is any, is in build and...

Amazon Linux Unpatched Vulnerability : CVE-2026-109619

The remote Amazon Linux host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be...

Out-of-bounds write in the brotlicffi decoder ("Node2Shell") also affects the PyPI Brotli package

CVE-2026-111497 "Node2Shell" is an out-of-bounds write CWE-787 in Google'sBrotli decoder c/dec/decode.c. DecodeBlockTypeAndLength returns an ambiguousvalue for an invalid block switch, and the fast decode path discards itCWE-252, unchecked return value, so a crafted Brotli stream makes the...

Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running...

CVE-2021-28480_HoneyPoC3

ExchangeRCE-CVE-2021-28480 THIS IS NOT A REAL EXPLOIT IT IS A HONEYPOC https://blog.zsec.uk/cve-2020-1350-honeypoc/ PoC for exploiting RCE in Exchange CVEs: CVE-2021-28480, CVE-2021-28481, CVE-2021-28482 and CVE-2021-28483. Usage Achieves RCE on Exchange Servers To run, from a Linux host: chmod +...

CVE-2018-7600

CVE-2018-7600 CVE-2018-7600 - Drupal 7.x RCE Drupal 7.58 unauthenticated RCE Requirements python3 python requests pip install requests Usage Install dependencies modify the HOST variable in the script run the code win Just install requests pip install requests, edit the file to change the host an...