EUVD-2026-93659

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-82162

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-82162

Versions prior to 5.2.3.35 of Dell Command | Configure (DCC) are vulnerable to an Improper Handling of Mixed Encoding vulnerability (CWE-175). An unauthenticated attacker with remote access could potentially exploit this flaw to achieve Elevation of Privileges . Remediation information can be fou...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

A flaw was found in Netty. Netty's DNS Domain Name System codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the...

KeyPatchX

KeyPatch Enhanced — Plugin d'assemblage sensible aux symboles pour IDA Pro Basé sur Keypatch par Nguyen Anh Quynh & Thanh Nguyen, branche améliorée modifiée par Euarno. Amélioration principale : utiliser directement les noms de symboles IDA dans l'assemblage x86/x64 , le plugin résout...

CVE-2021-42013

CVE-2021-42013 — PoC: تجاوز المسار + تنفيذ أوامر عن بُعد عبر modcgi تجاوز التصحيح للاستخدام فقط في بيئات خاضعة للرقابة ومملوكة. لا تستخدم ضد أنظمة بدون إذن. الوصف تم تطوير PoC لإظهار CVE-2021-42013 ، الموجود في Apache HTTP Server 2.4.50. هذا CVE هو تجاوز للتصحيح الذي أصدرته Apache لـ...

CVE-2026-28318-check

سكريبت كشف آمن لـ SolarWinds Serv-U DoS غير المصادق كاشف آمن غير مدمر لـ CVE-2026-28318 ، وهو حجب خدمة غير مصادق في SolarWinds Serv-U= 15.5.4.108. طلب POST واحد يحمل Content-Encoding: deflate وجسم يغذي ذلك الجسم إلى مزيل ضغط deflate في الذاكرة CZLibCompression الذي تؤدي إدارة المخزن المؤقت فيه إل...

Weblogic_Unauthorized-bypass-RCE

CVE-2020–14882 تجاوز التصريح غير المصرح به وتنفيذ الأوامر عن بُعد في WebLogic CVE-2020-14882 سكريبت اختبار تجاوز التصريح غير المصرح به وتنفيذ الأوامر عن بُعد في Oracle Weblogic يعمل على Python3 الطلبات POST /console/images/%252E%252E%252Fconsole.portal HTTP/1.1 Host: User-Agent: Mozilla/5.0 Windo...

CLEANSTART-2026-LH05062 HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header va...

Security vulnerability affects the sonarqube package. HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported Content-Encoding header value in the response message...

CLEANSTART-2026-ON00136 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON

Security vulnerability affects the sonarqube package. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON...

PT-2026-107109

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...

PT-2026-107236

Name of the Vulnerable Software and Affected Versions Apache log4net versions 1.2.12 through 3.4.x Description Improper encoding or escaping of output occurs in the RemoteSyslogAppender. Characters outside visible ASCII and space are removed from the record instead of being escaped, causing...

CVE-2026-106122: Encoding Error

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by...

A flaw was found in the GLib Base64 encoding routine when processing very large input data (CVE-2026-1484)

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrust...

PT-2026-107233

Name of the Vulnerable Software and Affected Versions Apache log4net versions 1.2.9 through 3.4.x Description Improper handling of Unicode encoding in the SmtpPickupDirAppender occurs when the mail file writer encounters content it cannot encode, such as an unpaired UTF-16 surrogate. This causes...

GHSA-V4X9-3549-CRWV PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...