An-Integrated-Wireless-Network-Forensic-Analysis-Framework

An-Integrated-Wireless-Network-Forensic-Analysis-Framework This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able to capture wireless network traffic, to analyze the captured traffic according to the...

CVE-2026-12067

Missing exception handlers in AvastSvc native message dispatcher ashServ.dll on Windows allow a local, unprivileged attacker to crash the service by sending specially crafted JSON messages. The vulnerability spans multiple handler pathways in the RPC-based native message protocol: LogNmSvc.messag...

Vaim-sms

Vaim-sms What is Vaim-sms ? This is sms bomber who send otp in target phone number unlimitly. Many times you just want to annoy or play a prank on your friends. If you find yourself in that situation then this SMS Bomber is the perfect tool for you! You can send unlimited SMS to anyone. This...

CVE-2026-123785

Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu in src/FbTk/Menu.cc that allows attackers to hang the window manager via crafted style geometry values. Attackers can supply a style with an oversized unbounded menu.titleHeight so the column loop never terminates,...

CVE-2026-123487

Parse Server before 8.6.115 and 9.0.0 before 9.10.7-alpha.1 validates user email address format with a regular expression whose run time grows quadratically with input length and that is applied without a length limit. An unauthenticated attacker who knows the application ID can send a sign-up...

CVE-2026-112335

Wazuh agent from 1.0.0 before 4.14.9 contains a stack-based buffer overflow in the logcollector snort-full log reader that miscalculates remaining buffer space in readsnortfull. Attackers who write crafted multi-line content to a monitored snort-full log can overflow the 65,280-byte stack buffer,...

CVE-2026-112336

Wazuh Manager from 3.0.0 before 4.14.9 contains a memory leak vulnerability in the generic JSON decoder that allows remote attackers to exhaust wazuh-analysisd memory via repeated static fields. Attackers can enroll an agent through passwordless enrollment and send events with duplicate fields su...

Linux xen-netback: guest can trigger use-after-free for reading multicast data

ISSUE DESCRIPTION Multicast handling in the driver is implemented as a lookup early on the transmit guest receive path. The respective function can be invoked in parallel with teardown of a device. Thus the lookup may access data which was already freed, with that memory perhaps already being in...

Linux xen-blkback: guest can trigger use-after-free for reading statistic data

ISSUE DESCRIPTION The driver does not serialise reads of the device I/O statistics against the freeing of the memory that holds them. This leads to a use-after-free when reading statistical counters while the device is being torn down. IMPACT This most likely crashes the driver, and possibly the...

Linux xen-netback: guest can trigger use-after-free for

ISSUE DESCRIPTION The network statistic data in the driver is protected by RCU. Unfortunately when tearing down the queues after an error during connecting to the frontend e.g. due to illegal Xenstore data filled in by the guest, the statistic data is being freed without synchronizing the RCU...

CVE-2026-123785

Fluxbox versions through 1.3.7 are vulnerable to an infinite loop within the Menu::updateMenu() function located in src/FbTk/Menu.cc. An attacker can cause a denial of service (DoS) at startup by providing crafted style geometry values, specifically an oversized and unbounded menu.titleHeight. Th...

CVE-2026-123492

SiYuan versions prior to 3.8.9 are vulnerable to a nil pointer dereference within the privateCacheMiddleware component. This flaw allows authenticated attackers possessing a valid API token to crash the kernel by sending a resources/read request during an initialized MCP session. Specifically, at...

EUVD-2026-118292

SiYuan before 3.8.9 contains a nil pointer dereference vulnerability in privateCacheMiddleware that allows authenticated attackers to crash the kernel by reading nonexistent MCP resources. Attackers with a valid API token can send a resources/read request in an initialized MCP session, causing a...

EUVD-2026-118287

Parse Server before 8.6.115 and 9.0.0 before 9.10.7-alpha.1 validates user email address format with a regular expression whose run time grows quadratically with input length and that is applied without a length limit. An unauthenticated attacker who knows the application ID can send a sign-up...

CVE-2026-112336

Wazuh Manager versions 3.0.0 before 4.14.9 are vulnerable to a memory leak within the generic JSON decoder. This flaw allows remote attackers to exhaust wazuh-analysisd memory by sending events containing repeated static fields, such as duplicate id fields, following a passwordless agent enrollme...

EUVD-2026-118278

Wazuh agent from 1.0.0 before 4.14.9 contains a stack-based buffer overflow in the logcollector snort-full log reader that miscalculates remaining buffer space in readsnortfull. Attackers who write crafted multi-line content to a monitored snort-full log can overflow the 65,280-byte stack buffer,...

CVE-2026-112336 Wazuh Manager 3.0.0 before 4.14.9 Memory Leak DoS via JSON Decoder

Wazuh Manager from 3.0.0 before 4.14.9 contains a memory leak vulnerability in the generic JSON decoder that allows remote attackers to exhaust wazuh-analysisd memory via repeated static fields. Attackers can enroll an agent through passwordless enrollment and send events with duplicate fields su...

EUVD-2026-118279

Wazuh Manager from 3.0.0 before 4.14.9 contains a memory leak vulnerability in the generic JSON decoder that allows remote attackers to exhaust wazuh-analysisd memory via repeated static fields. Attackers can enroll an agent through passwordless enrollment and send events with duplicate fields su...

CVE-2026-112334

Wazuh versions 1.0.0 before 4.14.9 are vulnerable to an out-of-bounds write vulnerability in wazuh-execd . An attacker with privileged manager-configuration access can corrupt root process memory by providing excess ar.conf entries. Specifically, by controlling ossec.conf active-response blocks, ...

EUVD-2026-118277

Wazuh from 1.0.0 before 4.14.9 contains an out-of-bounds write vulnerability in wazuh-execd that allows privileged manager-configuration attackers to corrupt root process memory via excess ar.conf entries. Attackers controlling ossec.conf active-response blocks can push over 64 commands to agents...