FreeBSD-SA-26:61.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:61.openssl Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in OpenSSL Category: contrib Module: openssl Announced: 2026-08-25 Credits:...

Linux Distros Unpatched Vulnerability : CVE-2026-63073

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact...

InfiniBand driver RCE

The vulnerability of the savestate, rollbackstate, and rxerequester functions in the drivers/infiniband/sw/rxe/rxereq.c module of the InfiniBand driver for Linux operating systems is related to the violation of data format agreements. Exploiting this vulnerability can allow a remote attacker to...

Linux kernel USB Network Adapter Buffer Overflow DoS

The vulnerability of the cdcncmchecktxmax function in the drivers/net/usb/cdcncm.c module of the Linux network adapter driver framework is related to a violation of the data format agreement. Exploiting this vulnerability can allow an attacker to cause a service failure...

Untrusted Sender DN Used as Format String in CMP Response Validation

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

UBUNTU-CVE-2026-53532

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...

CVE-2026-78430

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

CVE-2026-78430

CVE-2026-78430 is an OS command injection vulnerability in sworddut mcp-ffmpeg-helper versions 0.1.0, 0.1.1, and 0.2.1. The flaw resides in the handleToolCall function within the Tool Handler component (file src/tools/handlers.ts), where improper manipulation of the format argument allows command...

EUVD-2026-65092

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

CVE-2026-78430 sworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall os command injection

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

CVE-2026-78430 sworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall os command injection

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: ti-vpe: cal: Fixed a NULL pointer dereference in calctxv4l2initformats. In calctxv4l2initformats, devmkzalloc is assigned to ctx-activefmt, and there is a dereference of it afterward. This could lead to a NULL pointer...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Tracing: It was determined that processstring also allows arrays. To address a common bug where TRACEEVENT’s TPfastassign assigns the address of an allocated string to the ring buffer and then references it in TPPrintk, which can...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: cxl/acpi: Fixed a use-after-free in cxlparsecfmws KASAN and KFENCE detected a use-after-free in the CXL driver. This occurs in the cxldecoderadd function’s failure path. KASAN prints the following error: BUG: KASAN:...

PT-2026-81165

Name of the Vulnerable Software and Affected Versions Events Manager – Calendar, Bookings, Tickets, and more! versions prior to 7.4.0.2 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting XSS. This occurs when t...

PT-2026-81012

Name of the Vulnerable Software and Affected Versions mcp-ffmpeg-helper versions 0.1.0 through 0.2.1 Description An OS command injection issue exists within the Tool Handler component, specifically in the handleToolCall function located in the src/tools/handlers.ts file. This occurs when the form...

Coturn send_message_to_redis() Information Disclosure

The vulnerability of the sendmessagetoredis function in the hiredislibevent2.c file of the Coturn web server is related to insufficient handling of the format string. Exploiting this vulnerability could allow a remote attacker to cause service failures and expose sensitive information...

Exploit for CVE-2026-66916

Password-Protected Category Bypass via JSON Format in JoomGall...

ROOT-OS-DEBIAN-11-CVE-2024-42230 CVE-2024-42230 in linux - Patched by Root

Root has patched CVE-2024-42230 in the linux package for Root:Debian:11. Multiple fixed versions available...

EUVD-2026-64369

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write on Type II inbound URBs dataepsetparams sizes each URB transfer buffer before it adds the Format Type II transfer delimiter: u-packets = urbpacks; u-buffersize = maxsize u-packets; if fmt-fmttype ==...