EUVD-2026-111464

Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-111471

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-111442

Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-111431

Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-111473

Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-111453

Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-111398

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

K000164026: Next.JS vulnerability GHSA-673q-mjm6-r5xr

Security Advisory Description A vulnerability in applications using App router with Cache Component can lead to remote code execution. The application needs to have a use cache function that returns multiple typed arrays. GHSA-673q-mjm6-r5xr Impact There is no impact; F5 products are not affected...

Oracle E-Business Suite 12.2.15 TCF SQL Injection Scanner

Oracle E-Business Suite versions 12.2.3 through 12.2.15 contain an unauthenticated TCF SQL injection issue that can be chained to remote code execution. The supplied Nuclei template checks whether AppsTCFServer accepts the TCF proxy handshake...

WordPress VikRentCar Car Rental Management System cross-site request forgery vulnerability

WordPress VikRentCar Car Rental Management System versions 1.4.8 and earlier contain a cross-site request forgery vulnerability. This vulnerability stems from a missing or incorrect nonce validation in the condtextupdatetmpl function, potentially allowing unauthenticated attackers to trick...

Kleor Contact Manager arbitrary file upload vulnerability

Kleor Contact Manager versions 9.1.2 and earlier contain an arbitrary file upload vulnerability. This vulnerability stems from an incomplete blacklist of file extensions in the addmessage function; the trailing dot causes the extension extraction to return an empty string. Additionally,...

HCL BigFix AEX command injection vulnerability

The HCL BigFix AEX version 13.0.0.1 contains a security vulnerability stemming from a remote code execution issue. This could allow attackers to execute code with privileges of the affected application or service, potentially leading to unauthorized access, data leakage, or system compromise...

Ultralytics path traversal vulnerability

Version 8.4.103 of Ultralytics contains a path traversal vulnerability. This vulnerability arises from insufficient validation of user-supplied paths during Google Drive downloads, potentially allowing remote attackers to execute arbitrary code by tricking targets into visiting malicious pages or...

CVE-2026-118605: Stack-based Buffer Overflow

Alpine iLX-F511 prhsdpservicesearchdecode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a...

PT-2026-127741

Name of the Vulnerable Software and Affected Versions llama.cpp versions b8841 through b11864 Description An out-of-bounds write exists in the ggml-rpc RDMA transport rdma recv function. Unauthenticated peers can overflow the rpc-server stack by advertising RDMA capabilities in the HELLO message,...

CVE-2026-118611: Heap-based Buffer Overflow

Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this...

CVE-2026-109218: kleor Contact Manager: The Contact Manager plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including,…

The Contact Manager plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 9.1.2 via the addmessage function. This is due to an incomplete extension blacklist that fails to detect dangerous extensions when a trailing dot causes the extension-derivation...

PT-2026-127731

Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability that allows authenticated users with system permission to run PHP by importing a crafted language pack. Attackers can upload a ZIP via import language.php containing a .inc file, then request it through the langua...

Ultralytics code injection vulnerability

Version 8.4.65 of Ultralytics contains a code injection vulnerability. This flaw stems from insufficient validation in the parsemodel function prior to executing Python code using user-supplied strings; it may allow remote attackers to execute arbitrary code within the context of the current user...

PT-2026-128332

Ultralytics parse model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...