[FreeBSD] ptrace PT_SC_REMOTE missing argument validation: 32GiB memmove underflow + sysent out-of-bounds call

Summary A local unprivileged user can trigger a 32GiB memmove underflow via ptrace PTSCREMOTE with pscrnargs=0, and call arbitrary sysent function pointers due to missing syscall number bounds check in ptracesyscallreq. This allows kernel code execution under security.bsd.unprivilegedprocdebug=1...

Linux kernel nft_inner: IPv6 inner_thoff desynchronization causes firewall bypass

Linux kernel nftinner: IPv6 innerthoff desynchronization causes firewall bypass Vulnerability Overview In the Linux kernel netfilter nftables inner expression, when parsing an inner IPv6 packet, ipv6findhdr first correctly computes the transport-layer offset including extension headers, but the...

Apache Superset Flask Debugger Exposure Leading to Remote Code Execution (CTAS SQL Injection to Unlock Werkzeug PIN)

CV26: Flask Debugger Exposure Leading to Remote Code Execution Vulnerability Overview | Item | Details | |------|------| | Type | Remote Code Execution RCE | | Severity | Critical when conditions are met / Medium standalone | | Affected Versions | = 6.0.1 | | Who can do what with what impact |...

Technitium DNS: undisclosed vulnerability (ZAI-2026-U6J3O8)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-N99IGG)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-MUJUVC)

Not disclosed. Details are not yet publicly disclosed...

SmartDNS: undisclosed vulnerability (ZAI-2026-QF8IJW)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-VZ74K6)

Not disclosed. Details are not yet publicly disclosed...

OpenBSD: undisclosed vulnerability (ZAI-2026-K54VSU)

Not disclosed. Details are not yet publicly disclosed...

Expedia Group: undisclosed vulnerability (ZAI-2026-NB0V53)

Not disclosed. Details are not yet publicly disclosed...

inDrive: undisclosed vulnerability (ZAI-2026-4TYTBA)

Not disclosed. Details are not yet publicly disclosed...

Apple Safari: undisclosed vulnerability (ZAI-2026-BVBFCK)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-URWEH2)

Not disclosed. Details are not yet publicly disclosed...

126 Mail: undisclosed vulnerability (ZAI-2026-6NPKQY)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-JICLG0)

Not disclosed. Details are not yet publicly disclosed...

MaraDNS: undisclosed vulnerability (ZAI-2026-0AD3CX)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-29MRZ8)

Not disclosed. Details are not yet publicly disclosed...

FineReport: undisclosed vulnerability (ZAI-2026-GKCDFV)

Not disclosed. Details are not yet publicly disclosed...

wolfSSL: undisclosed vulnerability (ZAI-2026-C7NI0A)

Not disclosed. Details are not yet publicly disclosed...

wolfSSL: undisclosed vulnerability (ZAI-2026-CMMW1U)

Not disclosed. Details are not yet publicly disclosed...

Dnsmasq: undisclosed vulnerability (ZAI-2026-WZ4HG0)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-33HV2G)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-XSJHOP)

Not disclosed. Details are not yet publicly disclosed...

Suricata: undisclosed vulnerability (ZAI-2026-7EFG4W)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-8OCKNA)

Not disclosed. Details are not yet publicly disclosed...

wolfSSL: undisclosed vulnerability (ZAI-2026-82C2JM)

Not disclosed. Details are not yet publicly disclosed...

Suricata: undisclosed vulnerability (ZAI-2026-YWZ9TG)

Not disclosed. Details are not yet publicly disclosed...

memcached: undisclosed vulnerability (ZAI-2026-KPZUCB)

Not disclosed. Details are not yet publicly disclosed...

memcached: undisclosed vulnerability (ZAI-2026-S2PBAW)

Not disclosed. Details are not yet publicly disclosed...

memcached: undisclosed vulnerability (ZAI-2026-6WX9W1)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-PZI8ZS)

Not disclosed. Details are not yet publicly disclosed...

Suricata: undisclosed vulnerability (ZAI-2026-YOBSEN)

Not disclosed. Details are not yet publicly disclosed...

Unbound: undisclosed vulnerability (ZAI-2026-VMSSRF)

Not disclosed. Details are not yet publicly disclosed...

Chasquid: undisclosed vulnerability (ZAI-2026-I6GE4W)

Not disclosed. Details are not yet publicly disclosed...

wget2: undisclosed vulnerability (ZAI-2026-WJ38EL)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-WJEEGD)

Not disclosed. Details are not yet publicly disclosed...

libevent: undisclosed vulnerability (ZAI-2026-UCJQUV)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-DMDP6W)

Not disclosed. Details are not yet publicly disclosed...

Suricata: undisclosed vulnerability (ZAI-2026-X1Y3J4)

Not disclosed. Details are not yet publicly disclosed...

Pi-hole: undisclosed vulnerability (ZAI-2026-DWBG7D)

Not disclosed. Details are not yet publicly disclosed...

OpenBSD: undisclosed vulnerability (ZAI-2026-VMYWKS)

Not disclosed. Details are not yet publicly disclosed...

lwIP: undisclosed vulnerability (ZAI-2026-TYF3SA)

Not disclosed. Details are not yet publicly disclosed...

lwIP: undisclosed vulnerability (ZAI-2026-SLN59I)

Not disclosed. Details are not yet publicly disclosed...

ZenTao: undisclosed vulnerability (ZAI-2026-IRUA72)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-FZEFVA)

Not disclosed. Details are not yet publicly disclosed...

Suricata: undisclosed vulnerability (ZAI-2026-Y061J4)

Not disclosed. Details are not yet publicly disclosed...

memcached: undisclosed vulnerability (ZAI-2026-FEJKTM)

Not disclosed. Details are not yet publicly disclosed...

vLLM: undisclosed vulnerability (ZAI-2026-789K7J)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-QA3272)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-L06R9G)

Not disclosed. Details are not yet publicly disclosed...