CVE-2026-102822

Russh is a Rust SSH client and server library. Prior to 0.63.1, a connection configured to permit mac=none can negotiate it with a MAC-requiring CTR or CBC block cipher because the selection logic validates needsmac only when MAC selection fails. A remote peer can then send a packet with a...

[SECURITY] Fedora 44 Update: gstreamer1-rtsp-server-1.28.6-1.fc44

A GStreamer-based RTSP server library...

UBUNTU-CVE-2026-56624

Improper certificate validation in Apache MINA SSHD server-side. Apache MINA SSHD is a Java library for client-side and server-side SSH. Server-side OpenSSH user certificate validation during user authentication in an Apache MINA SSHD server did not check for the unsupported force-command or...

app-tools-zxw (>=2.1.0, <=2.2.4), svc-order-zxw (>=0.0.1, <=2.3.20) +1 more potentially affected by unknown CVE via app-store-server-library (1.9.0)

app-store-server-library PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on app-store-server-library and may be impacted: - app-tools-zxw =2.1.0, =0.0.1, =3.3.2, =3.3.9 Source cves: unknown CVE Source advisory:...

Improper Check for Certificate Revocation

Overview app-store-server-library is a The App Store Server Library Affected versions of this package are vulnerable to Improper Check for Certificate Revocation in the SignedDataVerifier process when online revocation checking is enabled. An attacker can cause the acceptance of revoked...

app-tools-zxw (>=2.1.0, <=2.2.4), svc-order-zxw (>=0.0.1, <=2.3.20) +1 more potentially affected by unknown CVE via app-store-server-library (1.9.0)

app-store-server-library PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on app-store-server-library and may be impacted: - app-tools-zxw =2.1.0, =0.0.1, =3.3.2, =3.3.9 Source cves: unknown CVE Source advisory: OSV:GHSA-8F6J-263M-G72X...

app-tools-zxw (>=2.1.0, <=2.2.4), svc-order-zxw (>=0.0.1, <=2.3.20) +1 more potentially affected by unknown CVE via app-store-server-library (1.9.0)

app-store-server-library PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on app-store-server-library and may be impacted: - app-tools-zxw =2.1.0, =0.0.1, =3.3.2, =3.3.9 Source cves: unknown CVE Source advisory: GHSA-8F6J-263M-G72X...

GO-2026-5743 Remote Admin Authorization Bypass in "/config" API via Array Index Normalization in github.com/caddyserver/caddy

Remote Admin Authorization Bypass in "/config" API via Array Index Normalization in github.com/caddyserver/caddy...

GO-2026-5820 Mattermost doesn't archive the channel before removing persistent notifications in github.com/mattermost/mattermost-server

Mattermost doesn't archive the channel before removing persistent notifications in github.com/mattermost/mattermost-server...

CVE-2026-36478

An issue in Technitium DNS Server v.14.3 and before allows a remote attacker to cause a denial of service via the DnsServerApp.exe, DnsServerApp.dll, TechnitiumLibrary.Net/Dns/DnsClient.cs components...

GO-2026-5512 Mattermost allows authenticated guest users to enumerate user IDs outside their allowed visibility scope in github.com/mattermost/mattermost-server

Mattermost allows authenticated guest users to enumerate user IDs outside their allowed visibility scope in github.com/mattermost/mattermost-server...

GO-2026-5495 Mattermost doesn't validate CSRF tokens on an authentication endpoint in github.com/mattermost/mattermost-server

Mattermost doesn't validate CSRF tokens on an authentication endpoint in github.com/mattermost/mattermost-server...

GO-2026-5454 Mattermost doesn't validate the response body of proxied images in github.com/mattermost/mattermost-server

Mattermost doesn't validate the response body of proxied images in github.com/mattermost/mattermost-server...

GO-2026-5067 Mattermost allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences in github.com/mattermost/mattermost-server

Mattermost allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences in github.com/mattermost/mattermost-server...

GL.iNet GL-MT3000 command injection vulnerability

GL.iNet GL-MT3000 is a portable travel router from the company GL.iNet, which supports Wi-Fi 6 and VPN functions. Version 4.4.5 of GL.iNet GL-MT3000 has a command injection vulnerability. This vulnerability stems from an incorrect operation of the parameter devname in the function dlopen within t...

MAL-2026-4300 Malicious code in apple-app-store-server-library-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0927a2d11dc610a60127985e95a9851a1bcad74ff346884f089d1d25545aa896 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-42859

Neat VNC is a VNC server library. Prior to 0.9.6, a pre-authentication stack buffer overflow exists in neatvnc in the RSA-AES security type handler. An unauthenticated remote attacker who can reach the VNC listening socket can send a crafted security type 5 RSA-AES or security type 129 RSA-AES-25...

Malicious Package

Overview apple-app-store-server-library-poc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious code in apple-app-store-server-library-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f6b57befbd248b884d81978566bd3d4a57ef499f1eb8f8f66c00dc02e76588c The package apple-app-store-server-library-poc was found to contain malicious code. Source: ghsa-malware...

MAL-2026-3123 Malicious code in apple-app-store-server-library-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f6b57befbd248b884d81978566bd3d4a57ef499f1eb8f8f66c00dc02e76588c The package apple-app-store-server-library-poc was found to contain malicious code. Source: ghsa-malware...