EUVD-2026-83126

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, a crafted ZIP-compressed TIFF processed with TIFF multithreading enabled can make TIFFInput::readnativescanlines return through an error path while...

CVE-2026-65970

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, a crafted ZIP-compressed TIFF processed with TIFF multithreading enabled can make TIFFInput::readnativescanlines return through an error path while...

CVE-2026-65970: Expired Pointer Dereference

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, a crafted ZIP-compressed TIFF processed with TIFF multithreading enabled can make TIFFInput::readnativescanlines return through an error path while...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec: Enable SMT before waking offline CPUs. If SMT is disabled or a partial SMT state is enabled, when a new kernel image is loaded for kexec, the following warning is observed upon reboot: kexec: Waking offline CPU 228...

Astra Linux – Vulnerability in libvirt

A use-after-free flaw was discovered in libvirt. The qemuMonitorUnregister function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting...

Astra Linux – Vulnerability in Firefox and Thunderbird

NSSToken objects were accessed via direct pointers, and could be accessed in an unsafe manner on different threads, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

mikrot8over

mikrot8over mikrot8over: strumento di sfruttamento rapido per Mikrotik RouterOS fino alla versione 6.38.4 Descrizione Questa è una rielaborazione dell'originale Mikrotik Exploit. Sono state aggiunte la compatibilità con Python 2 e funzionalità di scansione multithreading. Versione Python L'utilit...

Exploit for CVE-2026-7777

--- CVE-2026-7777 – Rust Use‑After‑Free in Unsafe Web Server...

SQLi

SQL Injection Detector A multithreaded SQL injection detectio...

FLOCK_CVE_SCANNER

FLOCKCVESCANNER Scan and exploit with permission Ov...

Unsynchronized Access to Shared Data in a Multithreaded Context

Overview Affected versions of this package are vulnerable to Unsynchronized Access to Shared Data in a Multithreaded Context in the parseTemplate process, which uses a shared tpl template instance across concurrent goroutines without synchronization. An attacker can cause process crashes,...

JLSEC-2026-620 WebSocket reader data race in auto-PONG/CLOSE-echo handling in HTTP.jl

Description The WebSocket reader task processed incoming frames by calling wsonincomingdata! without holding ws.sendlock. That function is not a pure parser: its auto-PONG and CLOSE-echo paths push! onto the shared ws.codec.outgoingframes vector, while application send/ping/pong/close paths mutat...

EUVD-2026-38350

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled inpu...

aiqc (>=3.0.22, <=7.1.5), amdnet (>=1.0.0, <=1.0.2) +8 more potentially affected by CVE-2026-11816 via keras (2.7.0)

keras PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aiqc =3.0.22, =1.0.0, =0.1.11, =2.7.0.0, =0.12.5, =0.0.0, =0.0.96, =0.3.8 Source cves: CVE-2026-11816 Source advisory: OSV:PYSEC-2026-2324...

PT-2026-48341

Name of the Vulnerable Software and Affected Versions Net::IMAP versions prior to 0.5.15 Net::IMAP versions prior to 0.6.5 Description Several commands in the Net::IMAP Ruby client accept raw string arguments that are only validated to prevent CRLF injection and are then sent verbatim. An incorre...

Exploit for Path Traversal in Fortinet Fortiproxy

CVE-2018-13379 — Mass Exploit for Fortine...

Unsynchronized Access to Shared Data in a Multithreaded Context

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Unsynchronized Access to Shared Data in a Multithreaded Context

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Unsynchronized Access to Shared Data in a Multithreaded Context

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Unsynchronized Access to Shared Data in a Multithreaded Context

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...