CVE-2026-106435

A flaw was found in pymongo. An attacker who can supply crafted BSON Binary JSON data to the application's decoding functions can trigger an out-of-bounds read when parsing a truncated regular expression missing a terminating null byte. This flaw can cause the application process to terminate...

CVE-2025-44137

CVE-2025-44137 Неавторизованное чтение файла в MapTiler Tileserver-php v2.0. Описание MapTiler Tileserver-php v2.0 уязвим для Directory Traversal. Функция renderTile в tileserver.php отвечает за доставку тайлов, хранящихся в виде файлов на сервере, по веб-запросам. При формировании пути к файлу...

CVE-2026-98190

A flaw was found in the Linux kernel's wilc1000 wireless driver. The driver fails to adequately validate the length of incoming Wi-Fi Direct P2P public action frames before reading the frame header, leading to an integer underflow and out-of-bounds memory read. A nearby unauthenticated attacker c...

CVE-2026-98187

A flaw was found in the Linux kernel's p54 Wi-Fi driver. The driver fails to verify that an entire interface record fits within the buffer boundaries when parsing EEPROM Electrically Erasable Programmable Read-Only Memory data. An attacker capable of attaching a crafted wireless device or supplyi...

CVE-2026-98193

A flaw was found in the Linux kernel's libipw wireless driver. When processing Temporal Key Integrity Protocol TKIP network frames, the driver assumes the frame contains a complete Message Integrity Check MIC without verifying that the packet meets the minimum expected length. An attacker within...

CVE-2026-98188

A flaw was found in the Linux kernel's p54 wireless driver. An attacker capable of connecting a malicious wireless device could cause a Denial of Service DoS by triggering a system crash. This issue occurs because the driver fails to validate data length parameters when reading calibration curve...

CVE-2023-31445-Unprivileged-Information-Disclosure

CVE-2023-31445-كشف-المعلومات-غير-المصرح-به يحتوي المستودع على وصف لـ CVE-2023-31445 الذي اكتشفه فريق Dodge Industrial لمنصة Dodge OPTIFY. CVE ID: CVE-2023-31445 المورد: Cassia Networks المنتج: Access Controller الإصدار: Cassia-AC-2.1.1.2203171453 الثغرة: كشف المعلومات غير المصرح به المتأثر:...

Gitea-Forgejo-CVE-2025-68937

ثغرة توسيع القالب التعسفي في Gitea و Forgejo هذا العمل مرخص بموجب رخصة المشاع الإبداعي نسب المصنف - المشاركة على قدم المساواة 4.0 الدولية. ملخص أثناء فحص الكود المصدري لـ Forgejo و Gitea لفهم كيفية عمل القوالب بشكل أفضل، اكتشفت ثغرة تسمح لمستخدم مصادق عليه بإنشاء مستودع قالب ضار يمكن استخدامه...

DEBIAN-CVE-2026-94440

Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes...

Arbitrary-File-Read-CVE-2024-24919

Lecture Arbitraire de Fichiers CVE-2024-24919 Voici l'alerte reçue sur le SIEM Tout d'abord, qu'est-ce que CVE-2024-24919 ? Voici la description sur le site du NIST. Après quelques recherches supplémentaires, CVE-2024-24919 est une attaque de traversée de chemin, ce qui explique la requête...

CVE-2024-24919-Incident-Report.md

🛡️ SOC287 - قراءة ملفات تعسفية على Checkpoint Security Gateway CVE-2024-24919 التاريخ: 06 يونيو 2024 نوع التحقيق: هجوم ويب المنصة: LetsDefend القاعدة المُفعّلة: SOC287 – تم اكتشاف قراءة ملفات تعسفية CVE: CVE-2024-24919 الخطورة: عالية التأثير: وصول غير مصرح به إلى ملفات النظام الحساسة عبر اجتياز...

CVE-2026-3055

🔥 NetScalerBleed2: قراءة ذاكرة حرجة غير مصادق عليها في Citrix NetScaler CVE-2026-3055 قراءة ذاكرة خارج النطاق غير مصادق عليها تسريب ذاكرة فقط على الأجهزة المُهيأة كمزوّد هوية SAML IdP 📋 نظرة عامة CVE-2026-3055 هو ثغرة حرجة من نوع قراءة خارج النطاق CWE-125 في Citrix NetScaler ADC و NetScaler...

CVE-2026-107730

The multi-format reader SumatraPDF (version 3.7.0.22298 ) contains a signed integer overflow vulnerability in the LitParseHeader() function located in src/LitDoc.cpp . The issue occurs because the software uses signed 32-bit arithmetic to compute the section offset (hdrLen + nPieces * 16) without...

CVE-2026-107730 SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces 16 section offset using signed 32-bit arithmetic without validating the complete result. When the component values make that aggregate calculation...

CVE-2026-107730 SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces 16 section offset using signed 32-bit arithmetic without validating the complete result. When the component values make that aggregate calculation...

CVE-2026-107729

The multi-format reader SumatraPDF (version 3.7.0.22298) is vulnerable to an out-of-bounds read in src/MobiDoc.cpp during MOBI parsing. The root cause is an unsigned-to-signed conversion where the mobiHdr.hdrLen field is narrowed to a signed integer for validation. Values exceeding INT_MAX become...

CVE-2026-107729 SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/MobiDoc.cpp narrows the untrusted unsigned mobiHdr.hdrLen field to a signed integer for validation; values above INTMAX become negative and bypass the upper-bound check. When the EXTH flag is set, the original unsigned value is...

CVE-2026-107729 SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/MobiDoc.cpp narrows the untrusted unsigned mobiHdr.hdrLen field to a signed integer for validation; values above INTMAX become negative and bypass the upper-bound check. When the EXTH flag is set, the original unsigned value is...

CVE-2025-71428

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

CVE-2026-107726 Hazelcast: Arbitrary member memory access by low-privileged client

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a malicious client able to connect to a cluster allows arbitrary reads from a cluster member's Java heap, off-heap data, an...