[FreeBSD] ptrace PT_SC_REMOTE missing argument validation: 32GiB memmove underflow + sysent out-of-bounds call

Summary A local unprivileged user can trigger a 32GiB memmove underflow via ptrace PTSCREMOTE with pscrnargs=0, and call arbitrary sysent function pointers due to missing syscall number bounds check in ptracesyscallreq. This allows kernel code execution under security.bsd.unprivilegedprocdebug=1...

Linux kernel nft_inner: IPv6 inner_thoff desynchronization causes firewall bypass

Linux kernel nftinner: IPv6 innerthoff desynchronization causes firewall bypass Vulnerability Overview In the Linux kernel netfilter nftables inner expression, when parsing an inner IPv6 packet, ipv6findhdr first correctly computes the transport-layer offset including extension headers, but the...

Apache Superset Flask Debugger Exposure Leading to Remote Code Execution (CTAS SQL Injection to Unlock Werkzeug PIN)

CV26: Flask Debugger Exposure Leading to Remote Code Execution Vulnerability Overview | Item | Details | |------|------| | Type | Remote Code Execution RCE | | Severity | Critical when conditions are met / Medium standalone | | Affected Versions | = 6.0.1 | | Who can do what with what impact |...

GStreamer: undisclosed vulnerability (ZAI-2026-1GILS6)

Not disclosed. Details are not yet publicly disclosed...

Linux: undisclosed vulnerability (ZAI-2026-PT3XIF)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-4I96W6)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-W21L9V)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-OU0WYA)

Not disclosed. Details are not yet publicly disclosed...

libevent: undisclosed vulnerability (ZAI-2026-A31R90)

Not disclosed. Details are not yet publicly disclosed...

memcached: undisclosed vulnerability (ZAI-2026-7IM11G)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-AN7LFE)

Not disclosed. Details are not yet publicly disclosed...

memcached: undisclosed vulnerability (ZAI-2026-VYDXF1)

Not disclosed. Details are not yet publicly disclosed...

Pi-hole: undisclosed vulnerability (ZAI-2026-OLWNGT)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-PHUCEU)

Not disclosed. Details are not yet publicly disclosed...

wolfSSL: undisclosed vulnerability (ZAI-2026-QNN5QV)

Not disclosed. Details are not yet publicly disclosed...

RT-Thread: undisclosed vulnerability (ZAI-2026-73R17B)

Not disclosed. Details are not yet publicly disclosed...

memcached: undisclosed vulnerability (ZAI-2026-L71WWA)

Not disclosed. Details are not yet publicly disclosed...

wolfSSL: undisclosed vulnerability (ZAI-2026-C824E1)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-MHIX66)

Not disclosed. Details are not yet publicly disclosed...

RT-Thread: undisclosed vulnerability (ZAI-2026-F6TNQP)

Not disclosed. Details are not yet publicly disclosed...

llama.cpp: undisclosed vulnerability (ZAI-2026-B9VX4R)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-EN9RA9)

Not disclosed. Details are not yet publicly disclosed...

FreeType: undisclosed vulnerability (ZAI-2026-FZVDDS)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-VLTEIU)

Not disclosed. Details are not yet publicly disclosed...

c-ares: undisclosed vulnerability (ZAI-2026-2T0EV5)

Not disclosed. Details are not yet publicly disclosed...

wget2: undisclosed vulnerability (ZAI-2026-3G4UVR)

Not disclosed. Details are not yet publicly disclosed...

Hermes-Agent: undisclosed vulnerability (ZAI-2026-RE0S1C)

Not disclosed. Details are not yet publicly disclosed...

RT-Thread: undisclosed vulnerability (ZAI-2026-9LSQGM)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-NYKAEK)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-BBVT8O)

Not disclosed. Details are not yet publicly disclosed...

OpenBSD: undisclosed vulnerability (ZAI-2026-BTHWL2)

Not disclosed. Details are not yet publicly disclosed...

wget2: undisclosed vulnerability (ZAI-2026-9MCRW3)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-YIDAKS)

Not disclosed. Details are not yet publicly disclosed...

NetBSD: undisclosed vulnerability (ZAI-2026-YY21Y7)

Not disclosed. Details are not yet publicly disclosed...

RT-Thread: undisclosed vulnerability (ZAI-2026-3IX7WO)

Not disclosed. Details are not yet publicly disclosed...

wget2: undisclosed vulnerability (ZAI-2026-U5BE2Q)

Not disclosed. Details are not yet publicly disclosed...

Nacos: undisclosed vulnerability (ZAI-2026-G6U2S6)

Not disclosed. Details are not yet publicly disclosed...

lwIP: undisclosed vulnerability (ZAI-2026-ZIYO5G)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-2IYQ20)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-244QJ0)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-RHUOTB)

Not disclosed. Details are not yet publicly disclosed...

Nacos: undisclosed vulnerability (ZAI-2026-MUSW5O)

Not disclosed. Details are not yet publicly disclosed...

Mail.com: undisclosed vulnerability (ZAI-2026-MQF496)

Not disclosed. Details are not yet publicly disclosed...

vLLM: undisclosed vulnerability (ZAI-2026-GPUW55)

Not disclosed. Details are not yet publicly disclosed...

Hermes-Agent: undisclosed vulnerability (ZAI-2026-QGF218)

Not disclosed. Details are not yet publicly disclosed...

PlayStation: undisclosed vulnerability (ZAI-2026-6DI5V1)

Not disclosed. Details are not yet publicly disclosed...

wget2: undisclosed vulnerability (ZAI-2026-U7FEV3)

Not disclosed. Details are not yet publicly disclosed...

RT-Thread: undisclosed vulnerability (ZAI-2026-28M5L3)

Not disclosed. Details are not yet publicly disclosed...

RT-Thread: undisclosed vulnerability (ZAI-2026-787B0R)

Not disclosed. Details are not yet publicly disclosed...

wget2: undisclosed vulnerability (ZAI-2026-IN051M)

Not disclosed. Details are not yet publicly disclosed...