PT-2026-79199

Improper neutralization of argument delimiters in a command 'argument injection' in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network...

PT-2026-79254

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart...

PT-2026-79113

An unauthenticated remote peer can crash any NIOWebSocket-based server including Vapor and Hummingbird with a single 11-byte frame sent after a completed WebSocket handshake, dropping all active connections until the process restarts. This vulnerability is addressed in swift-nio version 2.101.0...

PT-2026-79214

Name of the Vulnerable Software and Affected Versions Microsoft Entra ID affected versions not specified Description An issue involving the deserialization of untrusted data allows an unauthorized attacker to remotely execute code over a network. Deserialization is the process of converting a dat...

PT-2026-79082

Mongoose is an embedded web server and network library. Prior to 7.22, a remote attacker can place a lone carriage return or line feed in multipart input processed by mg http next multipart in src/http.c. The loops comparing sb and sb + 1, and sh2 and sh2 + 1, use an incorrect AND condition and...

PT-2026-79165

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Improper authentication in the system could allow a remote attacker to obtain sensitive information. Recommendations At the moment, there is no information about a newer...

Malicious code in tinymember (crates.io)

tinymember is a malicious crate published to crates.io as part of the coordinated build-time payload campaign on 2026-08-20 that trojanized arrayref, internment, and append-only-vec and published the proc-macro1 typosquat of proc-macro2. It was used as an attacker-controlled dependency carrying a...

UBUNTU-CVE-2026-63652

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior...

PT-2026-79224

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on...

UBUNTU-CVE-2026-76218

GitPython before 3.1.58 contains a remote code execution vulnerability...

PT-2026-79038

A security flaw has been discovered in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/view order.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released...

PT-2026-79037

A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save menu. The manipulation of the argument img leads to unrestricted upload. The attack is possible to be carried out remotely. T...

RHEL 8 : python-urwid (RHSA-2026:57638)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57638 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

The vulnerability of the functions for working with the tsvector and tsquery data types in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the functions for working with the tsvector and tsquery data types in the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the logical decoding mechanism of the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the logical decoding mechanism in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ROS-20260820-73-0008

The vulnerability in freerdp3 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

RHEL 8 : python-urwid (RHSA-2026:57637)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57637 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

Linux Distros Unpatched Vulnerability : CVE-2026-76217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply...

PT-2026-79117

Name of the Vulnerable Software and Affected Versions lin-snow Ech0 versions prior to 5.4.2 Description A security flaw exists in the MD5Encrypt function within the internal/util/crypto/crypto.go file. This issue involves the use of a risky cryptographic algorithm, which could allow for remote...

TrueConf Server Missing Authentication for Critical Function Vulnerability

TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script...