CVE-2026-108518 DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element

DBI versions before 1.656 for Perl crash via type confusion in dbiprofile when a database handle is destroyed under a Profile Path with an attr element. An attr element names a database handle attribute, which dbiprofile reads from the handle's inner hash. It expects the inner handle as a referen...

CVE-2026-108518

Versions of the Perl DBI module prior to 1.656 are vulnerable to a type confusion issue in dbi_profile. When a database handle is destroyed under a Profile Path containing an {attr} element, the system may dereference the handle's inner hash as a reference, leading to a SIGSEGV crash if the memor...

CVE-2026-108518

DBI versions before 1.656 for Perl crash via type confusion in dbiprofile when a database handle is destroyed under a Profile Path with an attr element. An attr element names a database handle attribute, which dbiprofile reads from the handle's inner hash. It expects the inner handle as a referen...

CVE-2026-108518

DBI versions before 1.656 for Perl crash via type confusion in dbiprofile when a database handle is destroyed under a Profile Path with an attr element. An attr element names a database handle attribute, which dbiprofile reads from the handle's inner hash. It expects the inner handle as a referen...

CVE-2026-105960

PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length...

kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction

A flaw was found in the Linux kernel's Transmission Control Protocol TCP networking stack. This vulnerability arises from a stale per-CPU variable that can retain a previously used Initial Sequence Number ISN when certain packets are dropped. A remote attacker could exploit this by sending...

EUVD-2026-105356

PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length...

CVE-2026-105960 HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter Inconsistency

PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length...

CVE-2026-105960

The PEAK-System PCAN Windows drivers are affected by a vulnerability involving the improper handling of length parameter inconsistency (CWE-130). The driver fails to sufficiently cap a variable-length receive-record copy to the actual caller-supplied output length, instead using a requested or qu...

CVE-2026-113725

A flaw was found in virtualenv. The bash activation script improperly escapes the virtual environment name when configuring the command prompt. If a user activates a virtual environment created with a specially crafted name, an attacker can achieve arbitrary code execution in the user's shell...

CVE-2026-112943

A flaw was found in launch-editor. When running on Windows systems, the package fails to properly escape percent characters when passing arguments to the Windows command shell. If an environment variable contains malicious values, an attacker could exploit this behavior to achieve arbitrary code...

CVE-2026-112942

A flaw was found in launch-editor. This vulnerability can allow a remote attacker to achieve arbitrary command execution on Windows systems. By submitting a specially crafted file path containing line and column suffixes, an attacker can bypass file existence checks due to improper path validatio...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in the pure-Python HTTP request parser in aiohttp/httpparser.py, where the method variable used to determine whether a request body should be treated as empty is incorrectly sourced from a local parameter rather...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via insufficient escaping of the VIRTUALENVPROMPT variable in activate.sh, which allows an attacker who controls the virtual environment prompt string to inject arbitrary shell code. When the activation script...

cve-2021-42013.get

Apache 2.4.50 - Path Traversal or Remote Code Execution cve-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...

certstream-server-rust

certstream-server-rust A Certstream server written in Rust. It monitors Certificate Transparency CT logs and streams newly issued SSL/TLS certificates over WebSocket and Server-Sent Events SSE. Overview Certstream aggregates certificates from Certificate Transparency logs and streams them in real...

AZL-110103 CVE-2026-113713 affecting package python-virtualenv 20.36.1-6

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

DEBIAN-CVE-2026-113713

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

CVE-2026-113713

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

CVE-2026-113713 virtualenv: Temporary app-data can leave dangling seed package links

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...