Linux Distros Unpatched Vulnerability : CVE-2026-113234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-113140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-113315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

AlmaLinux 8 : .NET 8.0 (ALSA-2026:86594)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:86594 advisory. dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability CVE-2026-58280 dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information...

Linux Distros Unpatched Vulnerability : CVE-2026-113262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

SUSE SLES15 Security Update : golang-github-prometheus-prometheus (SUSE-SU-2026:4606-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4606-1 advisory. golang-github-prometheus-prometheus was updated to version 3.13.2: - Security issues: CVE-2026-39821: Fixed validation bypass and privilege...

Gogs 0.13.3 Symlink Remote Code Execution

Gogs version 0.13.3 and earlier contain improper symbolic link handling in the PutContents API. This proof of concept uses a repository symlink to overwrite server-side files and trigger code execution. https://packetstorm.news/download/236748...

PT-2026-134541

Replaying GSS-TSIG signed UDP messages can result in memory corruption in "named". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker controls, the attacker may potentially...

PHP2Shell RCE vulnerabilities that can allow unauthenticated remote code execution (CVE-2026-109618, CVE-2026-109619)

The Brocade Product Security Team has become aware of two memory-safety vulnerabilities stemming from improper handling of fatal errors, specifically out-of-memory errors, during request processing in PHP. When a request terminates unexpectedly due to these errors, the internal PHP state can beco...

CVE-2026-113095

A flaw was found in chromium-browser. An out-of-bounds read vulnerability in the Focus component allows a remote attacker to execute arbitrary code within the browser's restricted environment sandbox. By convincing a user to visit a specially crafted HTML page, an attacker can trigger this memory...

CVE-2026-113092

A flaw was found in Google Chrome. A use-after-free vulnerability in the Passwords component allows a remote attacker to execute arbitrary code inside the browser sandbox by convincing a user to open a crafted HTML page. Because the application attempts to access memory after it has been released...

dotnet10.0: dotnet11.0: ASP.NET Core Remote Code Execution Vulnerability

The Blazor WebAssembly debug proxy embeds attacker-controlled ToString, description, and class-name values into generated C without consistently escaping them. When a developer evaluates an expression while debugging, the value can escape the generated string literal and execute code on the...

Critical: Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update

An update for .NET 10.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...

dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...

dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-113311

A flaw was found in the chromium-browser ServiceWorker component. A remote attacker could exploit this flaw to execute arbitrary code within the browser sandbox by enticing a user to visit a specially crafted HTML page. This issue stems from a use-after-free memory corruption condition, which...