OvenMediaEngine versions up to 0.21.0 have a denial of service vulnerability in the OvtPacket::LoadHeader() function. This flaw allows unauthenticated attackers to send crafted OVT packets with payload_length values above 32750, causing connections to stall and memory to accumulate indefinitely. This disrupts the origin-to-edge stream relay by holding connections open and exhausting resources.
xianyu-auto-reply-fix versions through 2.0.7 have a missing authorization vulnerability in the POST /send-message endpoint. This flaw allows unauthenticated attackers to send messages on behalf of other users by exploiting publicly known default API secrets. Attackers can use a hard-coded api_key along with another user's cookie_id and chosen message parameters to send arbitrary messages from that merchant account.
Signal K Server versions prior to 2.33.0 have a missing authentication vulnerability that permits unauthenticated remote attackers to download log archives via the /skServer/ziplogs endpoint. These archives contain the JWT secretKey, which attackers can extract to forge administrator tokens and create persistent admin accounts, resulting in full server control.
CherryTree versions through 1.7.2 have an OS command injection vulnerability in the CtActions::link_clicked function. This flaw allows attackers to execute arbitrary commands on the victim's system by embedding shell metacharacters in web link URLs. The vulnerability is triggered when the non-default Custom Web Link Clicked Action option is enabled, enabling crafted document links to pass unquoted shell commands to std::system. This results in command execution with the privileges of the user clicking the link.
CherryTree versions through 1.7.2 have a path traversal vulnerability in the function CtStorageXmlHelper::_create_image_from_xml. This flaw arises because the software trusts unvalidated 'filename' attributes embedded in XML documents. An attacker can craft specially designed .ctd, .ctz, or .ctx files with absolute or home-directory (~) paths and no data, potentially causing sensitive files like ~/.ssh/id_rsa to be saved into the document.
KaringX ClashMi versions through 1.0.32.1801 disable TLS certificate validation by default in the HttpUtils helper. This flaw allows attackers controlling the user's proxy node to intercept HTTPS traffic by presenting any certificate. Such attackers can serve a malicious update manifest that omits the sha256 checksum, enabling delivery of a malicious installer and resulting in code execution when the update is run.
A vulnerability exists in a2ui-project a2ui versions up to 0.12.0 in the Root.renderComponentTree function of the Renderer component. This flaw allows manipulation leading to dynamically-determined object attributes and can be exploited remotely. A fix has been developed but is pending acceptance in a pull request.
A vulnerability in a2ui up to version 0.10.4 affects the Image component in the file src/v0_9/basic_catalog/components/Image.js. The flaw involves improper input validation of the url argument, which can be manipulated remotely. A fix has been proposed but is not yet accepted.
DB Tools versions compiled with Golang 1.26.8 rely on a TLS implementation that does not include an internal denylist for certain known-bad CA certificates, specifically the eMudhra certificates. This issue is addressed in Golang 1.27.3, which adds these certificates to the denylist. DB Tools version 100.20.0 updates to Golang 1.27.3 to resolve this vulnerability.
CVE-2026-113957 is a vulnerability in Apple's container and containerization products where an attacker controlling the registry, a mirror, or the network path can serve arbitrary image content during a pull by digest. This could cause users to run images different from those they intended to pin. The vulnerability is fixed in container version 1.6.0 and containerization version 0.52.1 by verifying the returned digest against the pinned digest and validating the hash of manifests and blobs. Tag pulls remain exempt due to their mutable nature.
CVE-2026-118590 is a medium severity vulnerability in the nipy nibabel library versions 5.4.0, 5.4.1, and 5.4.2. It involves uncontrolled memory allocation in the array_from_file function within nibabel/volumeutils.py, which can be triggered remotely. A fix has been proposed but is not yet accepted.
The b20miner npm package version 0.3.1 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, uncompromised computer. Removal of the package alone may not eliminate all malicious software introduced by its installation.
Red Hat has released a security update for the kpatch live kernel patch module targeting kernel version 6.12.0-211.16.1.el10_2. This update addresses multiple vulnerabilities in the Linux kernel, including issues in netfilter ebtables, pppoe header handling, network bridge fast-leave behavior, packet hard header length consistency, and xfrm ah6 routing header validation. The update is rated as Important by Red Hat Product Security.
A local privilege escalation vulnerability exists in the Multi Router Traffic Grapher (MRTG) daemon due to symlink-following chown operations on the PID file path. This flaw allows a local attacker to manipulate the PID file path to escalate privileges. Red Hat has issued a security update addressing this issue in MRTG for Red Hat Enterprise Linux 9.4 variants.
Red Hat JBoss Enterprise Application Platform 8.1.9 includes multiple security fixes addressing vulnerabilities in components such as Netty and Apache CXF. These vulnerabilities include information disclosure via CORS header manipulation, denial of service through uncontrolled form parameters and many attachment headers, authentication bypass via crafted OIDC tokens, and XML External Entity (XXE) injection via WSDL/XSD import parsing. The update replaces version 8.1.8 and is rated as having an Important security impact by Red Hat.
JNISleuth-MCP is an open-source tool designed to assist analysts in unpacking and analyzing stripped Android native (.so) malware libraries. It automates the recovery of JNI RegisterNatives bindings, deobfuscates ARM64 OLLVM indirect branches, and bypasses anti-Frida tracing techniques using a stealth Dobby agent. The tool integrates with reverse engineering platforms like Ghidra and IDA Pro to provide unified cross-boundary analysis from Java to native code, facilitating malware triage and research.