PT-2026-113634

Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients...

PT-2026-113639

Improper neutralization of special elements in the NetBird client SSH configuration manager client/ssh/config/manager.go in NetBird versions 0.60.0 through 0.74.6 allows a malicious or compromised peer to execute arbitrary commands on other NetBird client hosts. The client writes a system-wide...

CVE-2026-110453: Incorrect Authorization

Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients...

CVE-2026-105429: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements in the NetBird client SSH configuration manager client/ssh/config/manager.go in NetBird versions 0.60.0 through 0.74.6 allows a malicious or compromised peer to execute arbitrary commands on other NetBird client hosts. The client writes a system-wide...

FreeBSD : Curl -- Multiple vulnerabilities (14dab969-c797-11f1-a6ea-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 14dab969-c797-11f1-a6ea-8447094a420f advisory. The Curl project reports: Tenable has extracted the preceding description block directly from...

vuls

Vuls: Escáner de Vulnerabilidades Escáner de vulnerabilidades para Linux/FreeBSD, sin agente, escrito en Go. Twitter: @vulsen Resumen Para un administrador de sistemas, tener que realizar análisis de vulnerabilidades de seguridad y actualizaciones de software a diario puede ser una carga pesada...

FreeBSD : gstreamer1 -- multiple vulnerabilities (bfa621d9-e508-4e3e-9a15-c2b54929ea77)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bfa621d9-e508-4e3e-9a15-c2b54929ea77 advisory. The GStreamer project reports: Multiple security issues were identified and fixed in the GStreamer...

krf

KRF KRF is a K ernelspace R andomized F aulter. Actualmente soporta los núcleos Linux y FreeBSD. ¿Qué? La inyección de fallos es una técnica de prueba de software que implica inducir fallos "faults" en las funciones llamadas por un programa. Si la función llamada no ha realizado una comprobación ...

tcpdump

TCPDUMP 4.x.y di The Tcpdump Group Per segnalare un problema di sicurezza, inviare un'e-mail a [email protected]. Per segnalare bug e altri problemi, contribuire con patch, richiedere una funzionalità, fornire feedback generico ecc., consultare le linee guida per contribuire nella radice...

PT-2026-108739

Name of the Vulnerable Software and Affected Versions NetApp Products affected versions not specified Description An issue exists in the semop2 function where it releases the per-set lock and sleeps while waiting for a semaphore condition. Upon waking, the function uses a 15-bit sequence number...

PT-2026-108736

Name of the Vulnerable Software and Affected Versions NetApp Products affected versions not specified Description When fdescfs4 is mounted in a jail using the "nodup" option, opening the '/dev/fd/N' endpoint returns a descriptor that fails to inherit the Capsicum capability rights or the FD RESOL...

PT-2026-108738

Name of the Vulnerable Software and Affected Versions NetApp Products affected versions not specified Description An issue exists where SCM RIGHTS file descriptor passing fails to preserve the FD RESOLVE BENEATH restriction during descriptor transfer. A process can bypass this restriction by...

PT-2026-108735

Name of the Vulnerable Software and Affected Versions NetApp Products affected versions not specified Description An off-by-one bug exists in the code that searches for the inner record type in TLS 1.3, where the actual record type is embedded as the last non-zero byte of the decrypted payload. A...

PT-2026-108737

Name of the Vulnerable Software and Affected Versions NetApp Products affected versions not specified Description The renameat2 function fails to enforce FD RESOLVE BENEATH on its directory arguments. This allows a jailed process to rename a directory relative to a restricted descriptor and...

FreeBSD : clamav -- Multiple vulnerabilities (2719a8da-c3f8-11f1-8da1-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2719a8da-c3f8-11f1-8da1-3497f65b111b advisory. The ClamAV project reports: Tenable has extracted the preceding description block directly fro...

FreeBSD : xorg -- Multiple vulnerabilities (06bf834f-c31f-11f1-9b94-901b0e13f1a0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 06bf834f-c31f-11f1-9b94-901b0e13f1a0 advisory. X.Org reports: Multiple issues have been found in the X server and Xwayland implementations...

FreeBSD : Vaultwarden -- Multiple vulnerabilities (3a72cd47-c157-11f1-a6ea-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3a72cd47-c157-11f1-a6ea-8447094a420f advisory. The Vaultwarden project reports: Tenable has extracted the preceding description block directly from th...

easy_triage

easytriage Vari script per il triage di sistemi compromessi Linux, ESXi, FreeBSD/NetScaler...

FreeBSD : LibreSSL -- Multiple vulnerabilities (85bcb950-c0b4-11f1-a6ea-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 85bcb950-c0b4-11f1-a6ea-8447094a420f advisory. The LibreSSL project reports: Tenable has extracted the preceding description block directly from the...

FreeBSD : libexpat -- Improper Handling of Unicode Encoding (7fed71c4-be3a-11f1-ab8d-00a0980083d7)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7fed71c4-be3a-11f1-ab8d-00a0980083d7 advisory. https://github.com/libexpat/libexpat/pull/1282 reports: Expat before 2.8.5 fails to validate that a hig...