52736 matches found
EUVD-2026-71788
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4HDF5inqattname that copies HDF5 attribute names into a fixed 256-byte buffer without length validation. Attackers can craft HDF5 files with oversized attribute names to overflow the destination buffer, causing...
AZL-99894 CVE-2026-86095 affecting package netcdf 4.9.0-4
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4HDF5inqattname that copies HDF5 attribute names into a fixed 256-byte buffer without length validation. Attackers can craft HDF5 files with oversized attribute names to overflow the destination buffer, causing...
CVE-2026-86095
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4HDF5inqattname that copies HDF5 attribute names into a fixed 256-byte buffer without length validation. Attackers can craft HDF5 files with oversized attribute names to overflow the destination buffer, causing...
CVE-2026-86095
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4HDF5inqattname that copies HDF5 attribute names into a fixed 256-byte buffer without length validation. Attackers can craft HDF5 files with oversized attribute names to overflow the destination buffer, causing...
DEBIAN-CVE-2026-57161
PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response updateserviceroute in pjsuaacc.c. This affects applications that register using the...
nbox-pwnage
nbox-pwnage root@kitploit: Here comes the paintrain! . lol . lol . lol o o ==== OO|nn. || | nbox | oo oo oo 'oo OOOO-| oo\ | +--+--+--+--+--+--+--+--+--+-$1-+--+--+--+--+--+--+ 1. Create your own nbox appliance: vagrant up 2. SSH into the appliance with vagrant ssh 3. Check for some of the nbox...
MAL-2026-15944 Malicious code in @crysnovax/baileys-fixed (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bca343c567c4a163c81912649019e99d22070a069b1c7e174a16659f6e41469 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
bash-4.3-fixed-CVE-2014-6271
Introduction This is GNU Bash, version 4.3. Bash is the GNU Project's Bourne Again SHell, a complete implementation of the POSIX shell spec, but also with interactive command line editing, job control on architectures that support it, csh-like features such as history substitution and brace...
EUVD-2026-70922
Apache Allura's webhooks are vulnerable to Server-Side Request Forgery SSRF. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue...
EUVD-2026-70870
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed password to remotely access user hosts...
CVE-2026-85148 Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed password to remotely access user hosts...
EUVD-2026-70786
MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client and variable names are formatted into fixed 1024-byte buffers using sprintf without length validation. Attackers can supply arbitrarily long MOOS identifiers that overflow the...
CVE-2026-85452
MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client and variable names are formatted into fixed 1024-byte buffers using sprintf without length validation. Attackers can supply arbitrarily long MOOS identifiers that overflow the...
GHSA-3MP7-4RH5-JRV9 SiYuan: Localhost-trust admin bypass on auth-code-gated endpoints, with potential remote reachability via the fixed-port proxy
CVE: This vulnerability corresponds to CVE-2026-72809. Summary The kernel's CheckAuth grants RoleAdministrator to any request whose RemoteAddr is loopback 127.0.0.1, for a specific set of endpoints, and these localhost bypasses sit outside the accessAuthCode gate so they apply even when an access...
ROOT-APP-MAVEN-CVE-2026-45674 CVE-2026-45674 in io.netty:netty-resolver-dns - Patched by Root
Root has patched CVE-2026-45674 in the io.netty:netty-resolver-dns package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-47691 CVE-2026-47691 in io.netty:netty-resolver-dns - Patched by Root
Root has patched CVE-2026-47691 in the io.netty:netty-resolver-dns package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-42587 CVE-2026-42587 in io.netty:netty-codec-http - Patched by Root
Root has patched CVE-2026-42587 in the io.netty:netty-codec-http package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-42583 CVE-2026-42583 in io.netty:netty-codec - Patched by Root
Root has patched CVE-2026-42583 in the io.netty:netty-codec package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-48043 CVE-2026-48043 in io.netty:netty-codec-http2 - Patched by Root
Root has patched CVE-2026-48043 in the io.netty:netty-codec-http2 package for Root:Maven. Multiple fixed versions available...