20978 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-24049
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to...
Wheel security vulnerabilities
“wheel” is a command-line tool open-sourced by Python Packaging Authority. Versions of “wheel” prior to 0.46.1 contain security vulnerabilities. These vulnerabilities stem from the error handling of file permissions by the decompression function after extracting files, which may lead to privilege...
Azure Linux 3.0 Security Update: gh (CVE-2024-52308)
The version of gh installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52308 advisory. - The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace S...
CVE-2026-23526
CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.0.0 through 2.54.0, users that have the staff status may freely change their permissions, including giving themselves superuser status and joining the admin group, which gives them full access to...
CVE-2026-23516 CVAT vulnerable to XSS via skeleton SVG images
CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.2.0 through 2.54.0, an attacker is able to execute arbitrary JavaScript in a victim user's CVAT UI session, provided that they are able to create a maliciously crafted label in a CVAT task or...
CVE-2026-23516
CVAT (open-source annotation tool) is affected in versions 2.2.0–2.54.0 by an XSS-like vulnerability that lets an attacker execute arbitrary JavaScript in a victim user’s CVAT UI session. The attack requires the attacker to create a malicious label or an SVG in a skeleton configuration and coerce...
SploitGPT
🤖 SploitGPT - Your Penetration Testing Companion 🚀 Getting...
EUVD-2026-3646
OKI Configuration Tool 1.6.53 contains an unquoted service path vulnerability in the OKI Local Port Manager service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Okidata\Common\extend3\portmgrsrv.exe' to inject...
CVE-2021-47884 Configuration Tool 1.6.53 - 'OpLclSrv' Unquoted Service Path
OKI Configuration Tool 1.6.53 contains an unquoted service path vulnerability in the OKI Local Port Manager service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Okidata\Common\extend3\portmgrsrv.exe' to inject...
CVE-2021-47884
OKI Configuration Tool 1.6.53 contains an unquoted service path vulnerability in the OKI Local Port Manager service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Okidata\Common\extend3\portmgrsrv.exe' to inject...
CVE-2021-47884
Affected product and vulnerability: OKI Configuration Tool 1.6.53 with an unquoted service path in the OKI Local Port Manager service. The unquoted path is in 'C:\Program Files\Okidata\Common\extend3\portmgrsrv.exe', which can allow a local attacker to inject a malicious executable and escalate p...
CVE-2021-47884 Configuration Tool 1.6.53 - 'OpLclSrv' Unquoted Service Path
OKI Configuration Tool 1.6.53 contains an unquoted service path vulnerability in the OKI Local Port Manager service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Okidata\Common\extend3\portmgrsrv.exe' to inject...
A new era of agents, a new era of posture
The rise of AI Agents marks one of the most exciting shifts in technology today. Unlike traditional applications or cloud resources, these agents are not passive components- they reason, make decisions, invoke tools, and interact with other agents and systems on behalf of users. This autonomy...
PT-2026-3869
CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.0.0 through 2.54.0, users that have the staff status may freely change their permissions, including giving themselves superuser status and joining the admin group, which gives them full access to...
CVAT.ai CVAT security vulnerability
CVAT.ai CVAT is an open-source data processing tool developed by CVAT.ai. Versions 2.2.0 to 2.54.0 of CVAT.ai contain security vulnerabilities. These vulnerabilities allow attackers to execute arbitrary JavaScript in the CVAT UI sessions of victim users, potentially enabling them to access all CV...
OKI Configuration Tool code-related vulnerabilities
OKI Configuration Tool is a configuration management tool developed by OKI Corporation. Version 1.6.53 of the OKI Configuration Tool contains a code vulnerability. This vulnerability stems from an unquoted service path within the OKI Local Port Manager service, which may allow local attackers to...
@abuiles/vite-plugin (>=1.8.0, <=1.10.0), @anyauth/design-system (>=0.5.0, <=0.5.1) +24 more potentially affected by CVE-2026-0933 via wrangler (>=4.0.0, <=4.59.0)
wrangler NPM version =4.0.0, =1.8.0, =0.5.0, =12.6.6, =0.1.11, =0.8.0, =0.2.0, =0.0.0, =0.0.0-snapshot-001db2706f44e8ac35b9064bbbc2b6f14b577447, =1.0.6, =0.0.0-5788407, =0.0.25, =0.16.0, =1.0.0, =1.1.3 and more Source cves: CVE-2026-0933 Source advisory: SNYK:JS-WRANGLER-15046269...
EUVD-2026-3297
Mailpit has an SMTP Header Injection via Regex Bypass...
CVE-2025-9280 ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. Fuzzing performed using Defensics causes the device to become unresponsive, requiring a reboot...