878 matches found
CVE-2026-129119
C-Kermit from 6.0.192 before 11.1.515 contains a file collision protection bypass that allows malicious senders to append data to existing files by marking transfers as RESEND. The gattr function in ckcfn3.c clears the REJECT discard flag and switches to APPEND without a RECEIVE CONFIRM prompt,...
CVE-2026-129119
The C-Kermit file transfer utility (versions 6.0.192 before 11.1.515 ) contains a file collision protection bypass . A vulnerability in the gattr() function within ckcfn3.c allows a malicious sender to append data to existing files by marking transfers as RESEND . This process clears the REJECT d...
EUVD-2026-125560
C-Kermit from 6.0.192 before 11.1.515 contains a file collision protection bypass that allows malicious senders to append data to existing files by marking transfers as RESEND. The gattr function in ckcfn3.c clears the REJECT discard flag and switches to APPEND without a RECEIVE CONFIRM prompt,...
CVE-2026-129119 C-Kermit 6.0.192 before 11.1.515 File Collision Protection Bypass via RESEND
C-Kermit from 6.0.192 before 11.1.515 contains a file collision protection bypass that allows malicious senders to append data to existing files by marking transfers as RESEND. The gattr function in ckcfn3.c clears the REJECT discard flag and switches to APPEND without a RECEIVE CONFIRM prompt,...
Wordlister
Wordlister A simple wordlist generator and mangler written in python 3.10.1. Supported permutations: Capital Upper 1337 Append Prepend Additional functions: Each generated password doesn't contain same word twice. Output can be sorted based on the word length. Preview: usage: wordlister.py -h...
CVE-2026-14661
PostgreSQL's dblink and CREATE/ALTER SUBSCRIPTION features are vulnerable to external control of file names, allowing a user to append data to arbitrary files. The root cause is the "sslkeylogfile" connection parameter, which appends data in NSS keylog format to a user-specified file. While it ca...
CVE-2026-14661 PostgreSQL dblink and subscriptions can append to arbitrary files
External control of file name in PostgreSQL dblink and CREATE/ALTER SUBSCRIPTION allows a user to achieve persistent denial of service, via appending invalid data to a chosen file. Specifically, the "sslkeylogfile" connection parameter appends data, in NSS keylog format, to a file of the user's...
CVE-2023-36109
CVE-2023-36109 a poc for cve-2023-36109 request repo git clone https://github.com/jerryscript-project/jerryscript.git cd jerryscript build python ./tools/build.py --clean --debug --compile-flag=-m32 --compile-flag=-fno-omit-frame-pointer --compile-flag=-fno-common --compile-flag=-fsanitize=addres...
pillow: pillow: Denial of service via crafted PDF during append operations
A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted PDF document to an application performing PDF append operations. Because the PDF parser fails to properly track cyclic or deeply nested object references,...
pillow: pillow: Denial of service via crafted PDF during append operations
A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted PDF document to an application performing PDF append operations. Because the PDF parser fails to properly track cyclic or deeply nested object references,...
pillow: pillow: Denial of service via crafted PDF during append operations
A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted PDF document to an application performing PDF append operations. Because the PDF parser fails to properly track cyclic or deeply nested object references,...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151141)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151141 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsdsetattr checks whether a size update needs...
CVE-2026-122231
The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field00' parameter in all versions up to, and including, 1.12.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
CVE-2026-122231
The WS Form LITE WordPress plugin (versions up to and including 1.12.18 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists in the 'field_[0][0]' parameter due to insufficient input sanitization and output escaping. Specifically, the client-side esc_html() helper returns non-st...
EUVD-2026-119154
The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field00' parameter in all versions up to, and including, 1.12.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
CVE-2026-122231 WS Form LITE <= 1.12.18 - Unauthenticated Stored Cross-Site Scripting via Text Field Array Value
The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field00' parameter in all versions up to, and including, 1.12.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
PT-2026-139445
The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field 00' parameter in all versions up to, and including, 1.12.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
Astra Linux – vulnerability in linux-6.12, linux-6.18
In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate DIO orphan slot during inode read BUG A corrupted append-DIO dinode high byte at offset 0xa1 corrupted from 0 to 1 can carry an idioorphanedslot outside the mounted filesystem slot range and trigger a use-after-fr...
pillow: pillow: Denial of service via crafted PDF during append operations
A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted PDF document to an application performing PDF append operations. Because the PDF parser fails to properly track cyclic or deeply nested object references,...
pillow: pillow: Denial of service via crafted PDF during append operations
A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted PDF document to an application performing PDF append operations. Because the PDF parser fails to properly track cyclic or deeply nested object references,...