📄 Ivanti Endpoint Manager Mobile (EPMM) Unauthenticated Remote Code Execution

This Metasploit module exploits a OS command injection issue in Ivanti Endpoint Manager Mobile EPMM, formerly known as MobileIron. A remote attacker can achieve unauthenticated RCE with root privileges on an affected device. This module requires Metasploit: https://metasploit.com/download Current...

CVE-2025-22022 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-22022 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-71183 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-71183 affecting package kernel for versions less than 6.6.121.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-24401 affecting package avahi for versions less than 0.8-7

CVE-2026-24401 affecting package avahi for versions less than 0.8-7. A patched version of the package is available...

CVE-2026-21948 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21948 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-56226 affecting package libsndfile for versions less than 1.2.2-4

CVE-2025-56226 affecting package libsndfile for versions less than 1.2.2-4. A patched version of the package is available...

CVE-2025-71077 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-71077 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-68806 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68806 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-61594 affecting package ruby for versions less than 3.3.5-7

CVE-2025-61594 affecting package ruby for versions less than 3.3.5-7. A patched version of the package is available...

CVE-2025-68336 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68336 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-68764 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68764 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-68259 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68259 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-69420 affecting package edk2 for versions less than 20240524git3e722403cd16-14

CVE-2025-69420 affecting package edk2 for versions less than 20240524git3e722403cd16-14. A patched version of the package is available...

CVE-2026-24684

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in rdpsndtreatwave. This vulnerability is fixed in 3.22.0...

CVE-2026-24681

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel callback after URBDRC channel close, leading to a use after free in urbwritecompletion. This vulnerability is fixed in 3.22.0...

CVE-2026-24677

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecamencodercompressh264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in swsscale. This vulnerability is fixed in 3.22.0...

CVE-2026-2242

A vulnerability was determined in janet-lang janet up to 1.40.1. This impacts the function janetcif of the file src/core/specials.c. Executing a manipulation can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. This...

CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

firefox: thunderbird: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component...

firefox: thunderbird: Incorrect boundary conditions in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics component...