2436 matches found
[FreeBSD] ptrace PT_SC_REMOTE missing argument validation: 32GiB memmove underflow + sysent out-of-bounds call
Summary A local unprivileged user can trigger a 32GiB memmove underflow via ptrace PTSCREMOTE with pscrnargs=0, and call arbitrary sysent function pointers due to missing syscall number bounds check in ptracesyscallreq. This allows kernel code execution under security.bsd.unprivilegedprocdebug=1...
Linux kernel nft_inner: IPv6 inner_thoff desynchronization causes firewall bypass
Linux kernel nftinner: IPv6 innerthoff desynchronization causes firewall bypass Vulnerability Overview In the Linux kernel netfilter nftables inner expression, when parsing an inner IPv6 packet, ipv6findhdr first correctly computes the transport-layer offset including extension headers, but the...
Apache Superset Flask Debugger Exposure Leading to Remote Code Execution (CTAS SQL Injection to Unlock Werkzeug PIN)
CV26: Flask Debugger Exposure Leading to Remote Code Execution Vulnerability Overview | Item | Details | |------|------| | Type | Remote Code Execution RCE | | Severity | Critical when conditions are met / Medium standalone | | Affected Versions | = 6.0.1 | | Who can do what with what impact |...
GStreamer: undisclosed vulnerability (ZAI-2026-TKMVWP)
Not disclosed. Details are not yet publicly disclosed...
RT-Thread: undisclosed vulnerability (ZAI-2026-F6TNQP)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-B16V25)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-MJSJT2)
Not disclosed. Details are not yet publicly disclosed...
MongoDB: undisclosed vulnerability (ZAI-2026-FKYZP0)
Not disclosed. Details are not yet publicly disclosed...
glibc resolver: undisclosed vulnerability (ZAI-2026-KDCNDB)
Not disclosed. Details are not yet publicly disclosed...
Suricata: undisclosed vulnerability (ZAI-2026-DC099A)
Not disclosed. Details are not yet publicly disclosed...
AdGuard Home: undisclosed vulnerability (ZAI-2026-QGGF0M)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-G4FYPH)
Not disclosed. Details are not yet publicly disclosed...
Samsung Internet: undisclosed vulnerability (ZAI-2026-FZ92A7)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-QAK69R)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-FQ1YNK)
Not disclosed. Details are not yet publicly disclosed...
libevent: undisclosed vulnerability (ZAI-2026-BL7Q8S)
Not disclosed. Details are not yet publicly disclosed...
RT-Thread: undisclosed vulnerability (ZAI-2026-RQA8QG)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-H90S68)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-ED6NA8)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-D6JJ8F)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-H6KAFF)
Not disclosed. Details are not yet publicly disclosed...
Suricata: undisclosed vulnerability (ZAI-2026-PWVLPE)
Not disclosed. Details are not yet publicly disclosed...
Suricata: undisclosed vulnerability (ZAI-2026-E25TMT)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-AS74PP)
Not disclosed. Details are not yet publicly disclosed...
memcached: undisclosed vulnerability (ZAI-2026-G384D3)
Not disclosed. Details are not yet publicly disclosed...
ProtonMail: undisclosed vulnerability (ZAI-2026-LVT3AI)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-BOOVO6)
Not disclosed. Details are not yet publicly disclosed...
Microsoft Edge: undisclosed vulnerability (ZAI-2026-CSE9HW)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-TDAR6S)
Not disclosed. Details are not yet publicly disclosed...
Chasquid: undisclosed vulnerability (ZAI-2026-I6GE4W)
Not disclosed. Details are not yet publicly disclosed...
MongoDB: undisclosed vulnerability (ZAI-2026-QY4OII)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-HZZZNL)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-WNVU1Q)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-82C2JM)
Not disclosed. Details are not yet publicly disclosed...
Outlook: undisclosed vulnerability (ZAI-2026-HLJV88)
Not disclosed. Details are not yet publicly disclosed...
libevent: undisclosed vulnerability (ZAI-2026-4P9YY2)
Not disclosed. Details are not yet publicly disclosed...
Linux: undisclosed vulnerability (ZAI-2026-NEL9PI)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-550KDK)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-PXFW9O)
Not disclosed. Details are not yet publicly disclosed...
memcached: undisclosed vulnerability (ZAI-2026-9OYK3J)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-ZFYTAI)
Not disclosed. Details are not yet publicly disclosed...
Microsoft Windows: undisclosed vulnerability (ZAI-2026-APB04D)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-1JY1YX)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-SCU2XI)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-KXPHWM)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-K8DIH7)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-EUXJ98)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-ZEN978)
Not disclosed. Details are not yet publicly disclosed...