5692 matches found
CVE-2026-82077 PaperCut NG/MF: Remote Code Execution via Scan2Fax
An improper limitation of a pathname to a restricted directory path traversal vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings...
CVE-2026-82077 PaperCut NG/MF: Remote Code Execution via Scan2Fax
An improper limitation of a pathname to a restricted directory path traversal vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings...
CVE-2026-82077
A path traversal vulnerability exists in the Scan-to-Fax component of PaperCut NG and PaperCut MF . An authenticated administrator can exploit this flaw by providing crafted fax provider settings to achieve arbitrary command execution on the underlying host. The vulnerability is associated with a...
PT-2026-97815
Name of the Vulnerable Software and Affected Versions libvips version 8.19.0 Description A memory access issue occurs when processing little-endian PFM images. If the PFM text header length is not a multiple of four bytes, the mmap-based loader may expose pixel data at an address not properly...
PT-2026-97723
Name of the Vulnerable Software and Affected Versions PaperCut NG affected versions not specified PaperCut MF affected versions not specified Description A path traversal issue exists in the Scan-to-Fax component, where improper limitation of a pathname to a restricted directory allows an...
CVE-2026-82077: Improper Limitation of a Pathname to a Restricted Directory
An improper limitation of a pathname to a restricted directory path traversal vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings...
PT-2026-97880
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the of alias scan stem parser. The issue occurs because the parser executes the isdigit function on the byte at end - 1 before verifying that end start...
CVE-2026-84721
A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend. The email backend passes the user-supplied SMTP host and port from a notification template directly to the SMTP client without validating that the target is not an...
EUVD-2026-85615
A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend. The email backend passes the user-supplied SMTP host and port from a notification template directly to the SMTP client without validating that the target is not an...
CVE-2026-84721
A server-side request forgery (SSRF) flaw exists in the Ansible Automation Platform automation-controller email notification backend. The backend fails to validate user-supplied SMTP host and port values from notification templates against internal, loopback, or reserved addresses. An authenticat...
CVE-2026-84721 Automation-controller: automation-controller: email notification backend allows ssrf via user-controlled smtp host/port (internal port-scan oracle, smtp password exfil)
A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend. The email backend passes the user-supplied SMTP host and port from a notification template directly to the SMTP client without validating that the target is not an...
CVE-2026-84721
A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend. The email backend passes the user-supplied SMTP host and port from a notification template directly to the SMTP client without validating that the target is not an...
GreatXML
GreatXML GreatXML bitlocker bypass vulnerability Steps to reproduce, 1. If defender offline scan was initiated in the victim machine at any point then there is no need to login, the machine is automatically vulnerable. You will have to copy "unattend.xml" and "Recovery" directory to the root of t...
UBUNTU-CVE-2026-91777
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference and the equivalent...
CVE-2026-84721: Server-Side Request Forgery (SSRF)
A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend. The email backend passes the user-supplied SMTP host and port from a notification template directly to the SMTP client without validating that the target is not an...
PT-2026-97549
Name of the Vulnerable Software and Affected Versions Ansible Automation Platform automation-controller affected versions not specified Description A server-side request forgery flaw exists in the email notification backend. The system passes the user-supplied SMTP host and port from a notificati...
MAL-2026-16410 Malicious code in auclean (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 535d1083af63653f3cc6befeffe23a6fd97cea9b183b95eac92779a5abcdcd9d The pip install of auclean 0.4.2 runs a custom setup.py buildpy command that chmod 0755's and executes a 1.8MB bundled Rust ELF binary...
CVE-2020-1971
CVE-2020-1971 CVE-2020-1971 Auto Scan & Remote Exploit Script. Auto Local Scan & Patch Script. Currently in development Patched Source Code of OpenSSL 1.1.1i Install from source/Update .deb Script Currently in development 5:38pm Completed 5:50pm Install from source/Update Windows Currently in...
CVE-2026-88344
An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema buffer ends with a digit, the integer digit-scan loop in lex advances past the end of the input buffer and dereferences the out-of-bounds pointer. A specially crafted schema...