65043 matches found
CVE-2026-88341
A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration numbuffers=0 that triggers an assertion failure in yrarenagetptr, causing the application to terminate...
CVE-2026-77322
SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.3, WSConnection.Read in sip/transportws.go creates a wsutil.Reader without setting MaxFrameSize, allowing NextFrame to accept a client-controlled header.Length before ParseMaxMessageLength is applied. An unauthenticated ...
CVE-2026-62985
request-filtering-agent is an https.Agent implementation that blocks requests to Private/Reserved IP addresses. Prior to 3.2.1, RequestFilteringHttpAgent and RequestFilteringHttpsAgent synchronously threw from createConnection when rejecting a literal private-IP host such as 169.254.169.254 or...
UBUNTU-CVE-2026-88341
A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration numbuffers=0 that triggers an assertion failure in yrarenagetptr, causing the application to terminate...
CVE-2026-88341
A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration numbuffers=0 that triggers an assertion failure in yrarenagetptr, causing the application to terminate...
CVE-2026-59991
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite and PSDImage.numpy allocated output buffers from attacker-controlled PSD header geometry, including width, height, channels, depth, and per-layer rectangles, before validating those value...
CVE-2023-22077
CVE-2023-22077 CVE 概念验证：https://databasesecurityninja.wordpress.com/2025/08/04/cve-2023-22077-denial-of-service-from-pdb-level-against-container-level-dos-breaking-pdb-isolation/...
kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
A flaw was found in the Linux kernel's NVMe over TCP nvmet-tcp implementation. When a data digest mismatch occurs, a reference count underflow can happen due to an unconditional cleanup call. This issue can lead to a use-after-free condition and ultimately result in a permanent workqueue deadlock...
kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing
A flaw was found in the Linux kernel's Soft RoCE RDMA/rxe driver. An unauthenticated remote attacker can send a specially crafted UDP packet with an unknown opcode to trigger an out-of-bounds read. This vulnerability can lead to a kernel panic, effectively causing a Denial of Service DoS on the...
SIPGO: DoS via unvalidated Content-Length in the stream parser
Summary The stream parser allocates the SIP body buffer from the Content-Length header before validating its size, which can lead to an unauthenticated DoS. Details ParserStream.parseSingle allocates the body buffer from the declared Content-Length with no size check...
request-filtering-agent: Synchronous throw from createConnection() for literal private-IP hosts bypasses req.on('error'), crashing the Node.js process
Summary RequestFilteringHttpAgent / RequestFilteringHttpsAgent block requests to private IPs, but the blocking happens via a synchronous throw inside createConnection for literal private-IP hostnames e.g. 169.254.169.254, 127.0.0.1. Node.js's http.request / http.get expects createConnection to em...
EUVD-2026-84016
Dasel: Selector lexer panics on trailing whitespace in parseCurRune...
CVE-2026-77322 SIPGO: DoS via unvalidated WebSocket frame length
SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.3, WSConnection.Read in sip/transportws.go creates a wsutil.Reader without setting MaxFrameSize, allowing NextFrame to accept a client-controlled header.Length before ParseMaxMessageLength is applied. An unauthenticated ...
EUVD-2026-84818
SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.3, WSConnection.Read in sip/transportws.go creates a wsutil.Reader without setting MaxFrameSize, allowing NextFrame to accept a client-controlled header.Length before ParseMaxMessageLength is applied. An unauthenticated ...
CVE-2026-77322
The SIPGO library (prior to version 1.4.3 ) is vulnerable to a Denial of Service (DoS) attack via unvalidated WebSocket frame lengths. The root cause is located in sip/transport_ws.go, where WSConnection.Read creates a wsutil.Reader without setting the MaxFrameSize parameter. This allows an unaut...
CVE-2026-77322 SIPGO: DoS via unvalidated WebSocket frame length
SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.3, WSConnection.Read in sip/transportws.go creates a wsutil.Reader without setting MaxFrameSize, allowing NextFrame to accept a client-controlled header.Length before ParseMaxMessageLength is applied. An unauthenticated ...
Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS
Summary dasel's JSON and XML readers parse nested structures with unbounded recursion, one native stack frame per nesting level, with no depth guard. A small sub-10 MB, deeply nested document drives the Go runtime past its goroutine stack limit and triggers a fatal error: stack overflow. This is...
EUVD-2026-84017
Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS...
GHSA-CQXR-JXR2-85PQ Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS
Summary dasel's JSON and XML readers parse nested structures with unbounded recursion, one native stack frame per nesting level, with no depth guard. A small sub-10 MB, deeply nested document drives the Go runtime past its goroutine stack limit and triggers a fatal error: stack overflow. This is...