Lucene search
+L

1113345 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 3 days ago7 views

Malicious code in svelte-streak-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2172e0671582a6e9c3359cd893cb96a7a09706ae0670208ddfbc82636a828fed [email protected] was scanned across 8 files with no a static rule matches and no traced behaviors indicating credential access, exfiltration,...

5.8AI score
SaveExploits0References2
Cvelist
Cvelist
added 3 days ago33 views

CVE-2026-71958 D-Link DWR-M961 Buffer Overflow via quicksetup.cgi

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username fields and execute arbitrary commands by crafting a...

9.8CVSS0.00562EPSS
SaveExploits0References3
Cvelist
Cvelist
added 3 days ago32 views

CVE-2026-71957 D-Link DWR-M961 Buffer Overflow via app.cgi

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist.name field and execute arbitrary commands by crafting a specific...

9.8CVSS0.00594EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 3 days ago8 views

CVE-2026-71957

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist.name field and execute arbitrary commands by crafting a specific...

9.8CVSS6.1AI score0.00594EPSS
SaveExploits0References4
Cvelist
Cvelist
added 3 days ago33 views

CVE-2026-71949 D-Link DWR-M961 Command Injection via /boafrm/formUSSDSetup

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formUSSDSetup interface. A remote attacker can inject arbitrary malicious commands into the ussdValue and selectMenuValue fields, resulting in...

9.8CVSS0.02086EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 3 days ago22 views

Exploit for CVE-2026-64638

CVE-2026-64638 Reflected XSS on Login Screen Leading to PH...

8.9CVSS6.5AI score0.00766EPSS
SaveExploits25
NVD
NVD
added 3 days ago9 views

CVE-2026-42170

A heap-based buffer overflow vulnerability exists in the GIMP DDS DirectDraw Surface file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel bpp value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the...

7.8CVSS0.00187EPSS
SaveExploits0References2
EUVD
EUVD
added 3 days ago9 views

EUVD-2026-54792

A heap-based buffer overflow vulnerability exists in the GIMP DDS DirectDraw Surface file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel bpp value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the...

7.8CVSS5.9AI score0.00187EPSS
SaveExploits0References2
Cvelist
Cvelist
added 3 days ago38 views

CVE-2026-42170 Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c)

A heap-based buffer overflow vulnerability exists in the GIMP DDS DirectDraw Surface file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel bpp value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the...

7.8CVSS0.00187EPSS
SaveExploits0References2
CVE
CVE
added 3 days ago80 views

CVE-2026-42170

CVE-2026-42170 affects the GIMP DDS plug-in. The heap-based overflow occurs when a crafted DDS file declares a D3D9 pixel format but uses a lower bpp in the header, causing the loader to allocate an undersized heap buffer and then write pixel data at the real format’s stride, corrupting heap meta...

7.8CVSS5.9AI score0.00187EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 3 days ago8 views

CVE-2026-42170

A heap-based buffer overflow vulnerability exists in the GIMP DDS DirectDraw Surface file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel bpp value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the...

7.8CVSS5.9AI score0.00187EPSS
SaveExploits0
OSV
OSV
added 3 days ago6 views

CGA-8QM5-VCM3-9XC3

Bulletin has no description...

8.2CVSS4.9AI score0.00319EPSS
SaveExploits0
OSV
OSV
added 3 days ago7 views

MINI-3VVC-J2Q6-HC8V

Bulletin has no description...

6.2CVSS6.1AI score0.00198EPSS
SaveExploits0
OSV
OSV
added 3 days ago7 views

MINI-WFXJ-3J45-G5WC

Bulletin has no description...

6.2CVSS6.1AI score0.00198EPSS
SaveExploits0
OSV
OSV
added 3 days ago6 views

MINI-R7XF-5936-9CH2

Bulletin has no description...

4.8CVSS4.9AI score0.00127EPSS
SaveExploits0
OSV
OSV
added 3 days ago6 views

MINI-98R2-CH45-9FHP

Bulletin has no description...

7.1CVSS4.9AI score0.00292EPSS
SaveExploits0
OSV
OSV
added 3 days ago6 views

MINI-GRJG-GW5F-J5HP

Bulletin has no description...

6.3CVSS4.9AI score0.00349EPSS
SaveExploits1
OSV
OSV
added 3 days ago6 views

MINI-P5XQ-M935-95PQ

Bulletin has no description...

7.1CVSS4.9AI score0.00292EPSS
SaveExploits0
OSV
OSV
added 3 days ago6 views

MINI-2597-V2MP-2QXV

Bulletin has no description...

6.3CVSS4.9AI score0.00349EPSS
SaveExploits1
OSV
OSV
added 3 days ago5 views

MINI-H9F5-G839-43M3

Bulletin has no description...

7.1CVSS4.9AI score0.00292EPSS
SaveExploits0
Rows per page
Query Builder