CVE-2025-1302_jsonpath-plus_RCE

CVE-2025-1302 JSONPath-Plus RCE PoC PoC Script Name: poc.py A proof-of-concept exploit script for CVE-2025-1302, which targets an RCE vulnerability in the jsonpath-plus library. When run against a vulnerable service endpoint, the script attempts to trigger remote code execution via a JSONPath...

DEBIAN-CVE-2026-61547

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to version 0.17.0, a heap buffer overflow exists in rabbitmq-c when the public amqpsendframe API is used to serialize an oversized AMQPFRAMEBODY. The issue occurs because amqpframetobytes copies frame.payload.bodyfragment.len byte...

ROOT-OS-UBUNTU-2404-CVE-2025-37901 CVE-2025-37901 in linux - Patched by Root

Root has patched CVE-2025-37901 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

UBUNTU-CVE-2026-54161

Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. From 2.8.3 to 2.8.5, upsmon in clients/upsmon.c inserts the server-supplied ups.alarm value into shell commands executed by notify, asyncnotify, and wall. Whe...

ROOT-APP-GOBINARY-CVE-2024-45337 CVE-2024-45337 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2024-45337 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-65902 CVE-2026-65902 in dompurify - Patched by Root

Root has patched CVE-2026-65902 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-33816 CVE-2026-33816 in github.com/jackc/pgx/v5 - Patched by Root

Root has patched CVE-2026-33816 in the github.com/jackc/pgx/v5 package for Root:Go. Multiple fixed versions available...

Astra Linux – vulnerability in gnutls28

A flaw was found in gnutls. The PKCS7 padding check performed during decryption was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive information regarding the padding bytes via observable timing differences. This vulnerability constitutes a...

ROOT-APP-COMPOSER-AIKIDO-2026-248927 AIKIDO-2026-248927 in magento/product-community-edition - Patched by Root

Root has patched AIKIDO-2026-248927 in the magento/product-community-edition package for Root:Composer. Multiple fixed versions available...

Astra Linux – vulnerability in libde265

Libde265 v1.0.8 was found to contain an unknown crash caused by ffhevcputhevcqpelh3v3sse in sse-motion.cc. This vulnerability enables attackers to trigger a Denial of Service DoS condition by using a specially crafted video file...

Astra Linux – Vulnerability in SOX

A heap buffer overflow vulnerability was discovered in sox, within the lsxreadbuf function at sox/src/formatsi.c:98:16. This flaw can lead to a denial of service, code execution, or information disclosure...

DEBIAN-CVE-2026-53613

util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy mount2 path is used without /proc, restricted non-root mount requests validate an /etc/fstab target before the mount operation re-resolves that pathname. ...

ROOT-OS-ALPINE-322-CVE-2026-66034 CVE-2026-66034 in libssh2 - Patched by Root

Root has patched CVE-2026-66034 in the libssh2 package for Root:Alpine:3.22. Multiple fixed versions available...

DEBIAN-CVE-2026-61721

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loader assigns file-controlled wsmp.loopstart and wsmp.looplength values to samples without calling fluidsamplevalidate or fluidsamplesanitizeloop. A crafted DLS file can place...

ROOT-OS-DEBIAN-13-CVE-2026-56373 CVE-2026-56373 in imagemagick - Patched by Root

Root has patched CVE-2026-56373 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

Astra Linux – Vulnerability in libvpx

There is a heap overflow vulnerability in libvpx. Encoding a frame with dimensions larger than the originally configured size using VP9 may lead to a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or higher...

Astra Linux – Vulnerability in TIF format

LibTIFF 4.4.0 contains an out-of-bounds write vulnerability in TIFFmemcpy in libtiff/tifunix.c:346, when called from extractImageSection, located at tools/tiffcrop.c:6826. This vulnerability allows attackers to cause a denial-of-service attack through a crafted TIFF file. For users who compile...

DEBIAN-CVE-2026-57825

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...

MINI-H62M-6JG8-FMXP

Bulletin has no description...

@edgebrix-sdk/react (>=0.0.58, <=0.0.74), @kimia_software/tellair-wc (0.0.0) +16 more potentially affected by CVE-2026-56812 via phoenix (>=1.6.2, <=1.6.16)

phoenix NPM version =1.6.2, =0.0.58, =0.8.10, =0.1.8, =0.1.5, =0.1.0-rc0, =0.8.1, =0.0.1, =0.0.1, =0.0.0-PR-1--182e1d3, =19.0.0-beta.1, =1.0.23, =0.3.0, =0.1.1, =0.1.6 and more Source cves: CVE-2026-56812 Source advisory: OSV:GHSA-63MC-HW7G-86RR...