CVE-2026-106764

An issue in @rog0x/mcp-git-tools version 1.0.1 allows a remote attacker to achieve arbitrary code execution . The vulnerability is triggered specifically through the resolveBaseBranch function. The CVSS 3.1 score for this issue is 7.5 (HIGH) , with a vector indicating that it requires high comple...

Node.js 26.x Brotli Decoder Remote Code Execution Mitigation

Terraform configuration and a verification script provide an interim Azure Application Gateway WAFv2 mitigation for Node.js versions 22.x, 24.x, and 26.x affected by a Brotli decoder out-of-bounds write that can permit remote code execution...

ROS-20261023-73-0022

The vulnerability in libssh2 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0028

The vulnerability in Jenkins is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-121799

In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes...

CVE-2025-30046: Execution with Unnecessary Privileges

In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes...

ROS-20261023-73-0040

The vulnerability in Jenkins is related to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0149

The vulnerability in Jenkins is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2026-106764

An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function...

PHP 8.4.26 session.upload_progress Remote Code Execution

PHP version 8.4.26 under Apache modphp contains a pre-authentication remote code execution vulnerability in session upload progress handling. This proof of concept chains memory disclosure and stale session state to execute commands as the web worker. https://packetstorm.news/download/237267...

ROS-20261023-73-0223

The vulnerability in Jenkins is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0030

The vulnerability in Jenkins is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0225

The vulnerability in Jenkins is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-122139

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

Node.js 26.x Security Release Check

A Bash tool identifies installed and running Node.js versions affected by the October 2026 security release, including a Brotli decoder out-of-bounds write that may permit remote code execution...

PHP 8.4.26 mod_php Remote Code Execution

PHP version 8.4.26 with modphp contains an out-of-memory handling vulnerability that allows unauthenticated remote command execution. The included proof of concept targets the PHP session upload-progress feature. https://packetstorm.news/download/237269...

Linux Distros Unpatched Vulnerability : CVE-2026-114094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a...

rog0x mcp-git-tools security vulnerability

A security vulnerability exists in version 1.0.1 of rog0x mcp-git-tools; it stems from issues in the handleImageList function and may allow remote attackers to execute arbitrary code...

PHP 8.4.26 Remote Code Execution

PHP version 8.4.26 contains out-of-memory and stale-state memory-corruption vulnerabilities that can lead to remote code execution under a vulnerable Apache modphp prefork configuration. This proof of concept demonstrates the PHP2Shell exploit chain. https://packetstorm.news/download/237284...

CVE-2025-30047: Deserialization of Untrusted Data

CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...