TencentOS Server 3: php:8.2 (TSSA-2026:1209)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1209 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Security Update for Microsoft .NET Core (October OOB 2026)

The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. CVE-2026-70197 -...

Google Chrome Vulnerability: CVE-2026-118348

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

Google Chrome Vulnerability: CVE-2026-118353

Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Microsoft Edge (Chromium-based) buffer error vulnerability

A buffer error vulnerability exists in Microsoft Edge Chromium-based versions from 1.0.0.0 up to and including 154.0.4258.48. This vulnerability stems from using an incompatible type to access resources a type confusion, potentially allowing unauthorized attackers to execute code over the network...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from a post-free reuse issue in FileSystem, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

CVE-2026-57189: Out-of-bounds Write

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a T.140 RED out-of-bounds write during generation accumulation using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to...

Mistral AI Mistral Vibe software supply chain issue vulnerability

Versions of Mistral AI Mistral Vibe prior to 3.0.3 contain a software supply chain vulnerability. This vulnerability stems from a git filter driver defined in the .git/config file within an untrusted repository. When launched with --worktree, git worktree add applies .gitattributes and executes...

Google Chrome input validation error vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain an input validation error vulnerability. This vulnerability stems from improper input validation in the Command component, allowing remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from post-free reuse in Modularization, allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome Vulnerability: CVE-2026-118344

Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

ROS-20261027-73-0030

The vulnerability in the OpenSSH cryptographic agent SSH agent is related to insufficient validation of loaded modules based on the PKCS11 encryption standard. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

Google Chrome resource management error vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from a post-free reuse issue in the Video component, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Microsoft Edge (Chromium-based) resource management error vulnerability

Microsoft Edge Chromium-based versions prior to 154.0.4258.48 contain a resource management error vulnerability stemming from double-free conditions, which may allow unauthorized attackers to execute code over the network...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain a buffer error vulnerability. This vulnerability stems from memory corruption in FileSystem, potentially allowing remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues in Turbolev, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome Vulnerability: CVE-2026-118356

Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome Vulnerability: CVE-2026-118343

Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Kestra 1.3.20 Authentication Bypass / Remote Code Execution

Kestra version 1.3.20 contains an authentication-filter bypass that permits unauthenticated workflow creation and execution through a path ending in /configs, resulting in command execution inside the worker container. https://packetstorm.news/download/237872...

SPIP 4.4.19 and Earlier Remote Code Execution

SPIP versions before 4.4.20 contain an unauthenticated remote code execution vulnerability related to PHP block identification and varexport handling. The included proof of concept detects affected targets and deploys command execution and file-upload PHP shells...