EUVD-2026-124808

Tight JPEG decoding in TightVNC and UltraVNC viewers contains a heap-based buffer overflow because an attacker-controlled framebuffer rectangle width is not validated against a fixed-size decoding buffer. A malicious VNC server can cause an out-of-bounds heap write when a user connects, resulting...

CVE-2026-128321

The TightVNC and UltraVNC viewers are susceptible to a heap-based buffer overflow within the Tight JPEG decoding component. The vulnerability exists because the software fails to validate an attacker-controlled framebuffer rectangle width against a fixed-size decoding buffer. A malicious VNC serv...

CVE-2026-126346

The basic-ftp Node.js FTP client is vulnerable to a Denial of Service (DoS) via an uncaught exception in versions prior to 6.2.3 . The root cause is that FTPContext.send() throws an exception when encountering carriage return, line feed, or NUL characters in a command. Because response handlers e...

EUVD-2026-124721

@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.1.6, the WebSocket upgrade handler waits for the Hono application to finish asynchronous middleware or handler work without first attaching an error listener to the socket. If an unauthenticated client resets the...

xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

CVE-2024-21963

An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor HV pages and potentially cause a host crash leading to loss of availability...

CVE-2024-21963

CVE-2024-21963 is an out-of-bounds read vulnerability in AMD IOMMUs . The issue occurs when the IOMMU reads beyond the size chosen by the OS or Hypervisor for the Device Table , interpreting out-of-bounds data as valid configuration data. Under specific conditions—such as a Device Table size less...

EUVD-2024-55845

An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor HV pages and potentially cause a host crash leading to loss of availability...

CVE-2024-21963

An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor HV pages and potentially cause a host crash leading to loss of availability...

CVE-2026-120033

In FRRouting 10.1 and later, bgpd does not correctly close a BGP session when the Send Hold Timer RFC 9687 expires, i.e. when a neighbor has stopped accepting data from the router for twice the hold time. The connection is closed, but bgpd still considers the session to be up. A BGP neighbor that...

CVE-2026-0101

Improper validation of specified quantities in input within AMD Power Management Firmware PMFW could allow a local attacker to pass unsanitized input, potentially resulting in a system crash or denial of service...

CVE-2022-31901

CVE-2022-31901 Denial Of Services DOS in Notepad++x86 in 8.4.3 and before. Description Vulnerability triggering, via opening two specially crafted text files e.g. first.txt & second.txt as input to notepad++. As an illustrative example below, as of 11/07/2022, latest version of Notepad++x86 is...

CVE-2018-4901

CVE-2018-4901 crash poc & Leak info PoC details see: https://bigric3.blogspot.com/2018/03/cve-2018-4901-analysisadobe-acrobat.html...

CVE-2026-0101

Improper validation of specified quantities in input within AMD Power Management Firmware PMFW could allow a local attacker to pass unsanitized input, potentially resulting in a system crash or denial of service...

CVE-2026-0101

The AMD Power Management Firmware (PMFW) is vulnerable to a denial of service or system crash due to improper validation of specified quantities in input (CWE-1284 ). A local attacker can pass unsanitized input to trigger this condition. Additionally, documents identify a BLE Address Spoofing vul...

firefox: Use-after-free in the Crash Reporting component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Crash Reporting component...

drozer

drozer drozer is a security testing framework for Android. drozer allows you to search for security vulnerabilities in apps and devices by assuming the role of an app and interacting with the Android Runtime, other apps' IPC endpoints and the underlying OS. drozer provides tools to help you use,...

CVE-2018-4407

CVE-2018-4407 IOS/macOS kernel crash Usage: python CVE20184407.py IP/CIDR python CVE-20184407.py 192.168.1.1 python CVE20184407.py 192.168.1.0/24 1. find iphone nmap -sS -p 62078 --open 192.168.1.0/24 2. attack python CVE20184407.py iphoneip...

CVE-2026-120033

In FRRouting 10.1 and later , the bgpd daemon fails to correctly close a BGP session when the Send Hold Timer (RFC 9687) expires. This occurs when a neighbor stops accepting data for twice the hold time while still sending KEEPALIVEs. This flaw leaves the session in a phantom Established state or...

EUVD-2026-124617

In FRRouting 10.1 and later, bgpd does not correctly close a BGP session when the Send Hold Timer RFC 9687 expires, i.e. when a neighbor has stopped accepting data from the router for twice the hold time. The connection is closed, but bgpd still considers the session to be up. A BGP neighbor that...