CVE-2026-77422

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in builtins/src/main/java/org/jline/builtins/PosixCommands.java accepts a user-controlled regular expression in grep... and, unless line-regexp mode is used, automatically adds ...

CVE-2026-67238

RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, rabbitpidcodec:decomposefrombinary/1 parses a caller-supplied ETF-encoded binary and calls binarytoatomNode, utf8 on the node-name field. It is reached from rabbitvolatilequeue:pidfromname/2, which is invoked for any...

Security update for mcphost (important)

openSUSE security update: security update for mcphost ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21886-1 Rating: important References: bsc1278853 bsc1279274 bsc1279396 Cross-References: CVE-2026-84303 CVE-2026-84304 CVE-2026-84445 CVSS scores:...

CVE-2026-77423

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in less viewer passes user-controlled search and display-filter patterns from getPatternboolean doDisplayPattern in builtins/src/main/java/org/jline/builtins/Less.java directly to Java's...

CVE-2026-59980

hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blocking further processing with large enough unsanitized input. A fix is available in python-hyper/hpa...

DEBIAN-CVE-2026-59980

hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blocking further processing with large enough unsanitized input. A fix is available in python-hyper/hpa...

sudo-1.8.3p1-patched

sudo-1.8.3p1-patched Esta es una versión personalizada de sudo, basada en el paquete sudo 1.8.3p1 proporcionado por Canonical para Ubuntu 12.04 utilizando las URL a continuación, con los parches de CVE-2021-3156 aplicados...

CVE-2026-59980

A flaw was found in hpack, an HTTP/2 Header Encoding for Python. Unbounded variable integer decoding can lead to excessive computation when processing specially crafted, malformed input. A remote attacker could exploit this vulnerability to cause a denial of service by effectively blocking furthe...

CVE-2019-19511

CVE-2019-19511 Chevereto - 1.0.0 Free - 1.1.4 Free, = 3.13.4 Core, Remote Code Execution Description installer.php in Chevereto through 1.1.4 Free, and through 3.13.4 Core, allows remote authenticated admins to execute arbitrary PHP code by injecting this code into the setup process and overwriti...

kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree

A flaw was found in the Linux kernel's crypto: ccp module. An incorrect cleanup usage of the kfree function, which is used for memory deallocation, with a local pointer variable could lead to an invalid deallocation of a stack address. This issue can result in a system crash, causing a Denial of...

brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

A flaw was found in the brace-expansion library. The expand function does not apply maxLength when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is...

CVE-2026-59980

The python-hyper/hpack library, often used as a dependency for the python-hyper/h2 HTTP/2 implementation, is vulnerable to run-away computation due to unbounded variable integer decoding . Malformed input can trigger an O(n^2) runtime, potentially blocking further processing. A fix is available i...

CVE-2026-59980 hpack: Unbounded variable integer decoding can cause run-away computation on malformed input

hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blocking further processing with large enough unsanitized input. A fix is available in python-hyper/hpa...

CVE-2026-59980 hpack: Unbounded variable integer decoding can cause run-away computation on malformed input

hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blocking further processing with large enough unsanitized input. A fix is available in python-hyper/hpa...

CVE-2026-59980

hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blocking further processing with large enough unsanitized input. A fix is available in python-hyper/hpa...

WP-DOS-Exploit-CVE-2018-6389

WP-DOS-Exploit-CVE-2018-6389 This is a exploit of Wordpress DOS attack CVE 2018-6389. USE python3 wp-dosCVE-2018-6389.py domain threads Example python3 wp-dosCVE-2018-6389.py http://example.com 1000...

CVE-2019-7609

CVE-2019-7609 Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer https://nvd.nist.gov/vuln/detail/CVE-2019-7609 CVE-2019-7609 This vulnerability is a Prototype Pollution vulnerability found in Kibana. Exploiting this vulnerability can lead ...

bandiview-7.05-vuln-PoC

bandiview-7.05-vuln-PoC This repository contains a PoC for vulnerabilities uncovered in Bandiview 7.05 using fuzzing CVE-2024-45870 JXR File Parsing DoS Vulnerability CVE-2024-45871 PSD File Parsing DoS Vulnerability CVE-2024-45872 PSD File Parsing Stack Buffer Overflow Details Software: BandiVie...

GHSA-9WH6-9HQ7-9688 Klever-Go: Validator registration accepts an unvalidated BLS public key → consensus liveness DoS

Location: core/kapp/validators/validators.go:201 Register, genesis/checking/nodesSetupChecker.go:73. core/consensus/slot/bls/subslotStartSlot.go:165 core/consensus/.../headerSignatureVerify.go:123 Create.... Description Klever uses a BDN Boneh-Drijvers-Neven BLS multi-signature over BLS12-381 to...

Klever-Go: Validator registration accepts an unvalidated BLS public key → consensus liveness DoS

Location: core/kapp/validators/validators.go:201 Register, genesis/checking/nodesSetupChecker.go:73. core/consensus/slot/bls/subslotStartSlot.go:165 core/consensus/.../headerSignatureVerify.go:123 Create.... Description Klever uses a BDN Boneh-Drijvers-Neven BLS multi-signature over BLS12-381 to...