347939 matches found
CVE-2026-106574 ImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, crashing the server...
EUVD-2026-94393
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, crashing the server...
CVE-2026-106574 ImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, crashing the server...
Security Bulletin: IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-defined MCP server execution (CVE-2026-9764)
Summary IBM Bob could allow a remote attacker to execute arbitrary code when a user opens an untrusted repository in Bob Shell. Due to insufficient validation of workspace-provided MCP server configurations, MCP servers defined within the repository could be automatically executed without explici...
CVE-2026-106570 ImageMagick: Denial of service in distributed pixel cache server
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...
CVE-2026-106570 ImageMagick: Denial of service in distributed pixel cache server
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...
CVE-2026-106570 ImageMagick: Denial of service in distributed pixel cache server
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...
CVE-2026-106570
The ImageMagick image manipulation software is vulnerable to a Denial of Service (DoS) condition in its distributed pixel cache server . An unauthenticated client on an adjacent network can exhaust the server's available connections by repeatedly connecting to it. This issue is characterized by u...
EUVD-2026-94389
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...
CVE-2026-107206
LMCache versions through 0.5.5 are vulnerable to a missing authentication flaw in the multiprocess mode HTTP server. Because management endpoints listen on all interfaces by default, remote unauthenticated attackers can access sensitive functionality. Impacted actions include reading environment ...
CVE-2026-107206 LMCache through 0.5.5 Missing Authentication in MP HTTP Server Management API
LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...
CVE-2026-107206 LMCache through 0.5.5 Missing Authentication in MP HTTP Server Management API
LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...
Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 federated server and IBM Db2 shipped with IBM WebSphere Remote Server
Summary IBM Db2 federated server and IBM Db2 are shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM Db2 federated server and IBM Db2 has been published in a security bulletin CVE-2026-41586, CVE-2026-16702, CVE-2026-10649, CVE-2026-17463,...
r2s
R2S - React2Shell स्कैनर React Server Components में CVE-2025-55182 के लिए एक वेब-आधारित भेद्यता स्कैनर, जो एक गंभीर Remote Code Execution RCE भेद्यता है। लाइव स्कैनर: https://r2s.mxm0z.com CVE-2025-55182 के बारे में CVE-2025-55182, React Server Components Flight प्रोटोकॉल में एक गंभीर CVSS 10.0...
verify-ghsa-c4j6-fc7j-m34r
verify-ghsa-c4j6-fc7j-m34r GHSA-c4j6-fc7j-m34r / CVE-2026-44578 के लिए इन-बैंड वेरिफायर — Next.js में WebSocket अपग्रेड अनुरोधों के माध्यम से सर्वर-साइड रिक्वेस्ट फोर्जरी SSRF। ⚠️ केवल अधिकृत सुरक्षा परीक्षण के लिए। आप यह सुनिश्चित करने के लिए ज़िम्मेदार हैं कि आपके पास उस हर टारगेट का परीक्षण करन...
react-CVE-2025-55182-fixer
React सर्वर घटक सुरक्षा PR स्वचालन यह रिपॉजिटरी एक स्क्रिप्ट प्रदान करती है जो CVE-2025-55182 से प्रभावित रिपॉजिटरी के लिए स्वचालित रूप से बम्प और पुल रिक्वेस्ट PRs बनाने में मदद करती है, जो react-server-dom- और संबंधित React पैकेजों के कमजोर संस्करणों को प्रभावित करता है। यह उपकरण क्या करता है?...
CVE-2025-55182
CVE-2025-55182 POC यह रिपॉजिटरी CVE-2025-55182 के लिए एक प्रूफ ऑफ कॉन्सेप्ट POC है, जो भेद्यता और इसके शोषण को प्रदर्शित करता है। कमजोर सर्वर "dependencies": "next": "16.0.6", "react": "19.2.0", "react-dom": "19.2.0" , कमजोर सर्वर 2 "dependencies": "next": "^15.0.0", "react": "^19.0.0",...
Important: Red Hat Security Advisory: mod_auth_openidc:2.3 security update
An update for the modauthopenidc:2.3 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
Important: Red Hat Security Advisory: Red Hat JBoss Web Server 7.0.2 release and security update
Red Hat JBoss Web Server 7.0.2 is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives ...