ROS-20261005-73-0142

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261005-73-0127

The vulnerability of the ip6rtgetdevrcu function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261005-73-0074

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

HPESBHF05163 rev.1 - HPE Integrated Lights-Out (iLO) 7 Using COM, User Validation Failure Vulnerability

Potential Security Impact: Remote: User Validation Failure SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 7 iLO 7 1.25.00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2026-79820 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H ...

CVE-2026-79820: Improper Authentication

A remote user validation failure vulnerability exists in HPE Integrated Lights-Out iLO 7 firmware...

ROS-20261005-73-0137

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261005-73-0070

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `FontFile.compile()` function in the PIL/FontFile.py library for working with images in the Python Pillow library allows a attacker to cause a service failure.

The vulnerability of the FontFile.compile function in the PIL/FontFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the bdf_char() function in the PIL/BdfFontFile.py library for working with images in the Python Pillow library allows a attacker to cause a service failure.

The vulnerability of the bdfchar function in the PIL/BdfFontFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20261005-73-0102

The vulnerability of the perf component in the Linux operating system’s kernel is related to the expiration of a resource’s lifespan. Exploiting this vulnerability can allow an attacker to trigger a service failure...

ROS-20261005-73-0132

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the sub_4468B0() function in TOTOLINK N150RT router microprogramming software allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the sub4468B0 function in TOTOLINK N150RT router microprogramming systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

CVE-2025-65945-poc

CVE-2025-65945: Bypass de verificación de firma en node-jws Esto es una prueba de concepto para un bypass de verificación de firma en la librería node-jws. El error permite a atacantes falsificar JWTs válidos cuando el servidor deriva secretos HMAC de datos controlados por el usuario. ¿Cuál es el...

CVE-2023-52709-PoC

Prueba de concepto para CVE 2023-52709: "La pila Bluetooth de TI puede no generar una Dirección Privada Aleatoria Resoluble RPA, provocando una denegación de servicio DoS para dispositivos pares ya vinculados" CVE 2023-52709 Resumen Al ejecutar el caso de prueba SMP legacy 1001 de Defensics en mo...

VLC_CVE-2021-25804_Analysis

Un archivo AVI puede tener múltiples pistas. Por ejemplo, una pista de audio y una pista de video. Para analizar un número arbitrario de pistas, VLC primero debe determinar si una pista determinada está completa y es reproducible. Con este propósito se configuran dos variables. Ambas denominadas...

Cooldown Landmines: Cross-Tenant Interference Attacks on LLM Gateways

LLM gateways enforce separate tenant quotas while sharing model deployments and cooldown records that temporarily exclude failing backends. However, a tenant's request failure can update these shared records and restrict other tenants' access to serviceable deployments. We identify two attacks th...

CVE-2019-14223

CVE-2019-14223: Redirección Abierta en Alfresco Share La aplicación Alfresco Share es vulnerable a un ataque de Redirección Abierta mediante una solicitud POST manipulada. Mediante la manipulación del parámetro “failure” un atacante puede redirigir a una víctima a un sitio web malicioso a través ...

MinimalReproducer

Tras importantes esfuerzos, lo reduje a un replicador mínimo. Este es solo un proyecto vacío para demostrar el problema con el uso de dependency-check-maven que me veo obligado a hacer por las reglas de mi empresa. Revisa el pom.xml y verifica: mvn org.owasp:dependency-check-maven:RELEASE:aggrega...

CVE-2026-71892

In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.cms.jcajce.JceKeyTransRecipient.setKeySizeValidationtrue, never ran for a message using RFC 9709 content-encryption key derivation id-alg-cek-hkdf-sha256. The branch that should...

Protection Mechanism Failure

Overview Affected versions of this package are vulnerable to Protection Mechanism Failure in the LoadPolicyCache process when policy.xml uses an alternate DOCTYPE. An attacker can bypass security policy enforcement by crafting a policy.xml file with a DOCTYPE not ending in '', causing the parser ...