[SECURITY] [DLA 4839-1] gst-plugins-bad1.0 security update

Debian LTS Advisory DLA-4839-1 [email protected] https://www.debian.org/lts/security/ Andreans Henriksson October 16, 2026 https://wiki.debian.org/LTS Package : gst-plugins-bad1.0 Version : 1.22.0-4+deb12u8 CVE ID : CVE-2026-12892 CVE-2026-14935 CVE-2026-19387 CVE-2026-52718...

CVE-2026-16251

Mattermost versions 11.10.x = 11.10.0, 11.7.x = 11.7.9, 11.9.x = 11.9.1, 11.8.x = 11.8.5 fail to limit the size of remote image responses buffered in memory during local image proxy direct fetches, which allows a remote attacker to cause memory exhaustion on the server via a crafted oversized ima...

CVE-2026-16251

Mattermost versions 11.10.x <= 11.10.0 , 11.7.x <= 11.7.9 , 11.9.x <= 11.9.1 , and 11.8.x

CVE-2026-16251 Mattermost local image proxy allows server memory exhaustion via unbounded image response buffering

Mattermost versions 11.10.x = 11.10.0, 11.7.x = 11.7.9, 11.9.x = 11.9.1, 11.8.x = 11.8.5 fail to limit the size of remote image responses buffered in memory during local image proxy direct fetches, which allows a remote attacker to cause memory exhaustion on the server via a crafted oversized ima...

EUVD-2026-102750

Mattermost versions 11.10.x = 11.10.0, 11.7.x = 11.7.9, 11.9.x = 11.9.1, 11.8.x = 11.8.5 fail to limit the size of remote image responses buffered in memory during local image proxy direct fetches, which allows a remote attacker to cause memory exhaustion on the server via a crafted oversized ima...

CVE-2026-98401

A flaw was found in the Linux kernel's networking subsystem. When processing encapsulated network packets, the kernel fails to reset the transport header offset after stripping outer packet headers during tunnel decapsulation. A remote attacker could exploit this vulnerability by sending speciall...

LdrLibraryEx

LdrLibraryEx A small x64 library to load dll's into memory. Features low dependencies & function use only ntdll.dll used position independent code lightweight and minimal easy to use load modules from memory load modules from disk api sets support bypass image load callbacks using private memory...

CVE-2026-111377

A flaw was found in FreeRDP. An authenticated remote attacker can cause a Denial of Service DoS by initiating a message on a static virtual channel and repeatedly sending data fragments without completing the transmission. Because the server fails to enforce cumulative size limits during message...

CVE-2026-111376

A flaw was found in FreeRDP. When handling remote file clipboard transfers on Windows clients, the application fails to properly validate the length of file size responses returned by a Remote Desktop Protocol RDP server. A malicious RDP server can exploit this by returning an abnormally short...

CVE-2026-111378

A flaw was found in FreeRDP. An unauthenticated remote attacker can cause a Denial of Service DoS by exhausting server memory. When processing Network Level Authentication NLA connections over Transport Layer Security TLS, the server misinterprets invalid protocol bytes as an incomplete packet...

CVE-2026-111373

A flaw was found in FreeRDP. A malicious gateway or remote server can trigger a Denial of Service DoS by sending a zero-length WebSocket ping message to a connected client. When processing this empty payload, the application encounters an invalid null memory reference, triggering an assertion...

CVE-2026-98431

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. A circular locking dependency between memory mapping locks and device disassociation locks can lead to a deadlock condition during concurrent operations. A local user could trigger this vulnerability by performing...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

watcher

Anti Reverse Shell Hello my name is themoon also known shalev, i created this project to help people who run servers with lower security. You can use this project to protect your computer from attackers who may try to reverse shell your computer Informations on this project You can view how this...

CVE-2026-11108-Integer-Overflow-in-Memory-Allocator-kmalloc-Sim-

CVE-2026-11108 – Integer Overflow in Memory Allocator kmalloc Sim Program Code C // allocsim.c - Vulnerable memory allocator include include include define MAXBLOCK 1024 void mymallocsizet size sizet total = size + sizeofsizet; // header if total MAXBLOCK return NULL; void ptr = malloctotal; if...

CVE-2026-23007-Serverless-Cold-Start-Memory-Remanence-Data-Leakage-

CVE-2026-23007 – Serverless Cold Start Memory Remanence Data Leakage Program Code Python Lambda sim lambdaremanence.py - Simulated Lambda environment reuse import os, secrets def firstinvocation: Simulates storing a secret in a global variable global SECRET SECRET = secrets.tokenhex16 return...

Tenda-F3-V4

Tenda F3 Router Exploit & File Downloader This project is a tool for downloading various files from the Tenda F3 router v3/v4 through an unauthenticated vulnerability CVE-2020-35391. It allows you to get the configuration file, system log, and flash dump from a vulnerable router. Overview The...

3007Project

3007Project setuid program used to update player's score. Read score file content, search and update score base on given player ID, if no player ID is found, then new ID and score is added to file. Program should not crash unexpectedly and should exit gracefully with errors handled. Check for...

volatility

This project is archived. See Volatility 3 for modern investigations: https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - Volatile memory extraction utility framework The Volatility Framework is a...

CVE-2026-21007-GPU-Driver-ioctl-Race-Condition-Kernel-Memory-Mapping-

CVE-2026-21007 – GPU Driver ioctl Race Condition Kernel Memory Mapping Program Code C sim // gpudriversim.c - Simulated GPU driver ioctl with race condition include include include include void gpummap = NULL; sizet mapsize = 0; int locked = 0; void ioctlmapsizet size // Allocate GPU memory and m...