openssl: SSL_select_next_proto buffer overread

A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...

rugmuncher-backend

RMI Backend Repo: git.rugmunch.io/RugMunchMedia/rmi-backend Deploy: /root/backend/ su Talos Container: rmi-backend Health: http://127.0.0.1:8000/health attualmente non sano — l'host Redis non risolve Cos'è Backend FastAPI per la piattaforma RMI. Fornisce scansioni del rischio dei token, analisi...

gitgalaxy

GitGalaxy Repository-scale structural intelligence without compilation. Docs · Visualizer · Language Crucible · Raw Output 1 scan · 97 structural signals · 50+ languages · no compilation · 19 risk-exposure categories · 6 outputs The short version GitGalaxy builds a language-agnostic structural...

PT-2026-80856

Name of the Vulnerable Software and Affected Versions nektos/act versions 0.2.81 through 0.2.89 Description The software starts an HTTP Artifacts V4 backend when workflows use actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs, including 'CreateArtifact',...

ROOT-OS-DEBIAN-11-CVE-2025-12781 CVE-2025-12781 in python3.9 - Patched by Root

Root has patched CVE-2025-12781 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-53256 CVE-2026-53256 in linux - Patched by Root

Root has patched CVE-2026-53256 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-68188 CVE-2025-68188 in linux - Patched by Root

Root has patched CVE-2025-68188 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-31393 CVE-2026-31393 in linux - Patched by Root

Root has patched CVE-2026-31393 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-68808 CVE-2025-68808 in linux - Patched by Root

Root has patched CVE-2025-68808 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-53355 CVE-2026-53355 in linux - Patched by Root

Root has patched CVE-2026-53355 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-52629 CVE-2023-52629 in linux - Patched by Root

Root has patched CVE-2023-52629 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-57939 CVE-2024-57939 in linux - Patched by Root

Root has patched CVE-2024-57939 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-39968 CVE-2025-39968 in linux - Patched by Root

Root has patched CVE-2025-39968 in the linux package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-78051 alexta69 MeTube Cookie File cookies.txt file access

A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the file /download/.metube/cookies.txt of the component Cookie File Handler. This manipulation causes files or directories accessible. The attack can be initiated remotely. The explo...

CVE-2026-78122 docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/id/archive, /containers/id/export, /containers/id/logs, and /containers/id/top to read arbitrary files a...

SUSE CVE-2026-69153

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker can cause PreviousMap.loadFile to read an unintended source-map file by supplying an absolute or directory-traversal...

CVE-2026-74729

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fix usercopy overflow in snoopfileread putfifowithdiscard acts as both producer and consumer on the kfifo: it calls kfifoskip advances out and kfifoput advances in from the IRQ handler without synchronizin...

CVE-2026-74641

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctlssharedmem + offset; page = virttopagevaddr; getpagepag...

Security Bulletin: MaaS360 mobile apps (iOS and Android) are able to bypass authentication by using deep link from the browser.

Summary MaaS360 mobile apps iOS and Android are able to bypass authentication by using deep link from the browser. Vulnerability Details CVEID:CVE-2023-42021 DESCRIPTION: The MaaS360 iOS application could allow an attacker to bypass authentication mechanisms by exploiting the password reset...

CVE-2026-74729

CVE-2026-74729 is a usercopy overflow in the Linux kernel's soc: aspeed: lpc-snoop driver. The root cause is a race condition on SMP systems: put_fifo_with_discard() in the IRQ handler and snoop_file_read() concurrently access the same kfifo without synchronization, which can leave the internal (...