DJI CrystalSky ZS600C command injection vulnerability

Versions DJI CrystalSky ZS600C from 0.3.9.7 through 0.6.6.9 contain a command injection vulnerability. This vulnerability arises because the hardwaremonitor helper program running with root privileges allows OS command injection. Local unprivileged processes can write specially crafted content to...

ASUS Router command injection vulnerability

The ASUS Router 3.0.0.6.102 series version contains a command injection vulnerability. This vulnerability stems from improper handling of special elements within OS commands. Remote users can send specially crafted parameters to the router, allowing them to execute arbitrary commands with root...

ASUS Router cross-site request forgery vulnerability

Versions 3.0.0.6.102 and later of the ASUS Router contain a security vulnerability stemming from OS command injection and cross-site request forgery. This flaw may allow attackers to trick authenticated administrators into visiting phishing sites, thereby enabling the router to execute arbitrary...

Vulnerability related to CGM CLININET permission, authorization, and access control issues

CGM CLININET versions 2026.MS3 and earlier contain a vulnerability related to permission escalation and access control. This issue arises because multiple processes responsible for HL7 communication with external systems run as root when processing untrusted data. Compromised attackers on adjacen...

PT-2026-121802

CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter and executes code from untrusted data provided by the user. An attacker from adjacent network can supply a crafted query parameter to have an...

PT-2026-121781

Name of the Vulnerable Software and Affected Versions ASUS routers affected versions not specified Description Improper neutralization of special elements used in an OS command allows a remote user to execute arbitrary commands with root privileges. This occurs when crafted parameters are sent to...

PT-2026-122095

Hidden functionality undocumented backdoor in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a physically-present attacker with USB access to execute arbitrary OS commands as root by sending the hard-coded magic string...

PT-2026-135634

This update for ca-certificates-mozilla fixes the following issues: Updated to 2.92 state bsc1286261 Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1 Updated to 2.90 state bsc1279961 Removed: - AffirmTrust Commercial - AffirmTrust Networking - AffirmTrust Premium...

Linux Distros Unpatched Vulnerability : CVE-2026-99063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm ioctl: don't let datastart run past the buffer struct dmioctl has seven bytes of trailing padding, so the smallest buffer userspace is allowed to ask for,...

Oracle Linux 8 : ca-certificates (ELSA-2026-88550)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-88550 advisory. 2026.2.92v9.0.319-81.3 - Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch 2026.2.92v9.0.319-81.2 - Removing: emSign Root CS CA - G3 from Microso...

Oracle Linux 10 : ca-certificates (ELSA-2026-88455)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-88455 advisory. 2026.2.92v9.0.319-100.3 - Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch 2026.2.92v9.0.319-100.2 - Removing: emSign Root CS CA - G3 from...

PT-2026-121806

CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with root privileges, but due to incorrect permissions, its scripts and configuration files can be modified by the uhcapache user. An attacker with uhcapache privileges can modify these...

CVE-2025-30045: Improper Control of Generation of Code

CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF document content. Due to improper control of the code evaluated from these expressions, an authenticated, high-privileged attacker can cause arbitrary code to be executed with root...

PT-2026-121799

In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes...

PT-2026-122144

Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. By that, the directory is owned by the calling user the one that executes Isar instead of root. If...

A Deterministic Security Runtime for LLM Agents on MPI and Batch-Scheduled HPC Systems: Consensus-Governed, Hardware-Rooted Supervision of Every Rank

Large language model agents launch simulations on high-performance computing HPC systems, where one sbatch or mpirun can commit thousands of node-hours and a forged result can cost lives. Of 23 surveyed systems, none supervises the running job, and none holds when the control host is compromised...

Fedora 44 : ca-certificates (2026-0609e13c0d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0609e13c0d advisory. Update ca-certificates to ca-certificates-2026.2.92v9.0.319-2.fc44 Remove emSign Root CS CA - G3 Additional code signing certificate that sign 2 of the...

DJI CrystalSky ZS600C processing logic error vulnerability

Versions DJI CrystalSky ZS600C from 0.3.9.7 through 0.6.6.9 contain a logic error vulnerability. This vulnerability stems from an unrecorded backdoor within the “assistant” daemon running with root privileges. Physical access and USB access allow attackers to send the hard-coded string...

Zimbra Collaboration Suite permission and access control issue vulnerability

Versions 10.1.16 and 10.1.21 of the Zimbra Collaboration Suite contain a vulnerability related to permission escalation and access control. This issue arises because zmunbound’s passwordless sudo policy permits arbitrary parameters without restricting configuration paths. Attackers can exploit th...

PT-2026-121798

CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF document content. Due to improper control of the code evaluated from these expressions, an authenticated, high-privileged attacker can cause arbitrary code to be executed with root...