EUVD-2026-68929

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashtypescript allows an unauthenticated attacker to exhaust the BEAM atom table and abort the node via client-supplied RPC field names. AshTypescript.FieldFormatter.converttofieldatom/2 in...

CVE-2026-74837 Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatter

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashtypescript allows an unauthenticated attacker to exhaust the BEAM atom table and abort the node via client-supplied RPC field names. AshTypescript.FieldFormatter.converttofieldatom/2 in...

CVE-2026-74837 Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatter

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashtypescript allows an unauthenticated attacker to exhaust the BEAM atom table and abort the node via client-supplied RPC field names. AshTypescript.FieldFormatter.converttofieldatom/2 in...

CVE-2026-77856

ash_typescript (Elixir/BEAM library by ash-project) contains a resource-exhaustion flaw in resolve_typed_struct_field/2 within field_selector.ex. When a client-supplied field name on a typed struct field has no match in the reverse map, the code falls back to String.to_atom/1 before any field-exi...

CVE-2026-77856 Unbounded atom creation from typed struct field names in AshTypescript field selector

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashtypescript allows an unauthenticated attacker to exhaust the BEAM atom table and abort the node via client-supplied typed struct field names. resolvetypedstructfield/2 in...

CVE-2026-68138

CVE-2026-68138 — Linux kernel net/sched qdisc rate-table UAF tracking site Source for the CVE-2026-68138 patch-status tracker: a single-page site recording which distributions have shipped a fix for the net/sched qdisc rate-table use-after-free / double-free in the Linux kernel. Where the facts...

CVE-2025-22964

CVE-2025-22964: Inyección SQL ciega basada en tiempo en DDSN Interactive cm3 Acora CMS versión 10.1.1 DDSN Interactive cm3 Acora CMS versión 10.1.1 tiene una vulnerabilidad de inyección SQL ciega basada en tiempo causada por una sanitización y validación insuficientes de la entrada en el parámetr...

CVE-2023-21716

CVE-2023-21716 Corrupción del montón en la tabla de fuentes RTF de Microsoft Word https://twitter.com/jduck Una vulnerabilidad en wwlib de Microsoft Office permite a los atacantes lograr la ejecución remota de código con los privilegios de la víctima que abre un documento RTF malicioso. El atacan...

CVE-2024-22369

CVE-2024-22369 श्रेय यह POC Huawei ओपन सोर्स मैनेजमेंट सेंटर के Ziyang Chen द्वारा बनाए गए रीप्रोड्यूसर पर आधारित है। इस PoC को बनाने के लिए रीप्रोड्यूसर का उपयोग किया गया है, जिसमें कुछ समायोजन और सफाई की गई है, और कुछ और ऑटोमेशन भी जोड़ा गया है। वातावरण तैयार करें हमें एक MySQL इंस्टेंस की...

Cisco-UCM-SQLi-Scripts

Scripts de CVE-2019-15972 Cisco UCM SQLi Scripts que se pueden usar para explotar CVE-2019-15972, un problema de SQLi autenticado en Cisco Unified Call Manager UCM. Enumerar tablas - enumera todas las tablas en la base de datos subyacente y coloca los nombres de las tablas en un archivo de texto...

CVE-2026-82872

ToolJet before v3.16.208 fails to validate that the path organizationId matches the authenticated user's workspace before performing ToolJet DB table operations. A workspace admin can create, view, and delete database tables in another workspace by replacing the organizationId parameter in...

CVE-2026-82874

ToolJet before v3.16.208 fails to validate that authenticated users belong to the organization specified in the organizationId path parameter of tooljet-db endpoints, allowing any Builder user to read, modify, and delete tables across tenant boundaries. Attackers can extract victim organization I...

CVE-2026-82869

ToolJet Database versions before v3.16.44 contain a privilege escalation vulnerability in the jointables endpoint that grants JOINTABLES ability to all authenticated users without role or workspace membership validation. Attackers can read arbitrary ToolJet Database tables from any workspace by...

CVE-2026-80633

A flaw was found in the Linux kernel's iommufd component. A local user could trigger a kernel warning by releasing the last reference on a Direct Memory Access Buffer DMABUF-backed IOMMU page table without holding the necessary dmaresv lock. This missing lock operation can lead to system...

EUVD-2026-68407

ToolJet before v3.16.208 fails to validate that the path organizationId matches the authenticated user's workspace before performing ToolJet DB table operations. A workspace admin can create, view, and delete database tables in another workspace by replacing the organizationId parameter in...

KVM-Januscape

KVM-XJ: parche en caliente dumptool.py encuentra los offsets automáticamente; para saber cómo usarlo, lee el código tú mismo. Resumen de la vulnerabilidad CVE-2026-53359 Januscape es una vulnerabilidad de use-after-free UAF en el MMU sombra de KVM del kernel de Linux. Tiempo latente: 16 años agos...

CVE-2026-82722 AshAdmin LiveView events intern atoms from client input, exhausting the atom table (node DoS)

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashadmin lets any client that can reach the admin LiveView exhaust the BEAM atom table and crash the entire node. Two LiveView event handlers interned atoms from unvalidated client input: AshAdmin.PageLive's setacto...

EUVD-2026-68325

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashadmin lets any client that can reach the admin LiveView exhaust the BEAM atom table and crash the entire node. Two LiveView event handlers interned atoms from unvalidated client input: AshAdmin.PageLive's setacto...

CVE-2026-82722

ash-project ash_admin (an Elixir/BEAM library) is vulnerable to node-level denial of service via its LiveView event handlers. Two handlers interned atoms from unvalidated client input: AshAdmin.PageLive's set_actor used Module.concat/1 on the resource/domain payload, and AshAdmin.Components.Resou...

CVE-2026-82722 AshAdmin LiveView events intern atoms from client input, exhausting the atom table (node DoS)

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashadmin lets any client that can reach the admin LiveView exhaust the BEAM atom table and crash the entire node. Two LiveView event handlers interned atoms from unvalidated client input: AshAdmin.PageLive's setacto...