CVE-2026-89087

The cstruct package before 6.3.0 for OCaml mishandles indexes...

EUVD-2026-75709

The cstruct package before 6.3.0 for OCaml mishandles indexes...

CVE-2026-89087

CVE-2026-89087 affects the cstruct package for OCaml in versions before 6.3.0 . The root cause is an index mishandling issue. The assigned CVSS 3.1 score is 7.3 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, indicating a network-reachable flaw requiring no privileges or user interac...

CVE-2026-89087

The cstruct package before 6.3.0 for OCaml mishandles indexes...

DEBIAN-CVE-2026-88052

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::loadviafgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound and uses id as an unchecked index into the unichars vector. unicharinsertbackwardscompatible can leave the vector unchanged...

CVE-2026-88052

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::loadviafgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound and uses id as an unchecked index into the unichars vector. unicharinsertbackwardscompatible can leave the vector unchanged...

CVE-2026-88052

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::loadviafgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound and uses id as an unchecked index into the unichars vector. unicharinsertbackwardscompatible can leave the vector unchanged...

Excelize: Negative shared-string index causes panic in GetCellValue and GetRows

Negative shared-string index causes panic in GetCellValue and GetRows Summary Excelize parses shared-string cell values with strconv.Atoi and checks only the upper bound before indexing the shared string slice. If an XLSX file contains a shared-string cell with -1, the parsed index is negative. T...

pgm-attack

PGM-attack Overview Official code for our paper, Poisoning Attacks on the PGM-index. Quick Start 1. Clone and submodules root@kitploit: git clone REPOSITORY LINK cd pgm-index-poisoning git submodule update --init --recursive 2. Build root@kitploit: ./scripts/build.sh Requires CMake see...

ROOT-APP-PYPI-CVE-2026-44307 CVE-2026-44307 in mako - Patched by Root

Root has patched CVE-2026-44307 in the mako package for Root:PyPI. Multiple fixed versions available...

CVE-2026-59679

CVE-2026-59679 affects the libXfont2 font-server client (X.Org X11). The function fs_read_glyphs() in src/fc/fserve.c indexes the encoding[] array using num_chars from the FS_QueryXBitmaps16 reply, but that array was allocated based on num_extents from the separate FS_QueryXExtents16 reply—two fi...

VLC_CVE-2021-25801_Analysis

CVE-2021-25801 Analysis The vulnerability stems from a failure to throughly check the type of chunk being passed to Parseindx when attempting to read a sub indx chunk, pointed to by a valid super indx chunk. root@kitploit: else if pindx-iindextype == AVIINDEXOFINDEXES //this is the expected value...

CVE-2026-79591

A heap-buffer-overflow and use-after-free vulnerability exists in the xlsgetCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...

CVE-2026-79591

A heap-buffer-overflow and use-after-free vulnerability exists in the xlsgetCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...

EUVD-2026-75745

A heap-buffer-overflow and use-after-free vulnerability exists in the xlsgetCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...

CVE-2026-87500

Improper validation of array index in ANGLE in Google Chrome prior to...

CVE-2026-79591

A heap-buffer-overflow and use-after-free vulnerability exists in the xlsgetCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...

DRUPAL-CONTRIB-2026-134

Update 2026-09-11: Increased risk score to reflect publicly documented methods for developing exploits. This module integrates amazee.ai's AI services into Drupal, including a Postgres/pgvector vector database backend for use with Search API AI Search. The module doesn't sufficiently sanitize...

CVE-2026-61908

An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an out-of-bounds index. An authenticated user could attempt to download a crafted JMAP blob ID of the form H-, which could read past the end of the internal blobheaders array during download, exposing...

EUVD-2026-74935

Snipe-IT before 8.7.0 fails to properly enforce the viewKeys authorization gate in CSV export and API index endpoints, allowing authenticated users with only licenses.view permission to access product keys. Attackers can download all license keys in bulk via CSV export or validate candidate keys...