Important: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: expat: Denial of Service via integer overflow in expatrealloc CVE-2026-102633 expat: expat: Information disclosure via heap buffer over-read in XMLParseBuffer CVE-2026-77214 For more details about the security issues, includin...

CVE-2020-0796

CVE-2020-0796 Overview: The compression feature added to SMBv3 starting from Windows 10/Server version 1903 contains an integer overflow vulnerability confirmed by Microsoft on 12/03/2020. It allows an attacker to perform Local Privilege Escalation LPE and Remote Code Execution RCE. Here we will...

cve-2025-2082

How to Hack a Tesla? — Interactive Scenario Application This project is an interactive cybersecurity scenario based on a real vulnerability discovered by the security firm Synacktiv TPMS → VCSEC → CAN Bus chain. The scenario aims to teach how a Tesla Model 3 could be compromised through a...

CVE-2026-115889

A flaw was found in Wasmtime. An attacker could achieve a sandbox escape and compromise the host system by supplying a specially crafted WebAssembly Wasm module. When compiling functions containing an unusually large number of internal values, an integer overflow in the Cranelift compiler backend...

CVE-2026-117555

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dxbytes, causing crashes or heap memory disclosure into the decod...

CVE-2017-7529-Nginx---Remote-Integer-Overflow-Exploit

This repository does not have a README...

CVE-2026-111496

Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next computed the next punctuation time as timestamp + intervalsMissed + 1 interval with no overflow check. A record with a timestamp at or near Long.MAXVALUE advances stream time to that value, so the next...

CVE-2026-103410

An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a denial of service via a specially crafted TLS server certificate...

CVE-2026-103411

An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network access to cause information disclosure and a denial of service via a malicious DHCP reply...

CVE-2026-111496

Apache Kafka Streams is vulnerable to a StreamThread hang due to an integer overflow in the PunctuationSchedule.next() method. The application derives its stream-time clock from record timestamps; if a record with a timestamp near Long.MAX_VALUE is processed without overflow checks, the next punc...

CVE-2026-111496 Apache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuation

Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next computed the next punctuation time as timestamp + intervalsMissed + 1 interval with no overflow check. A record with a timestamp at or near Long.MAXVALUE advances stream time to that value, so the next...

CVE-2026-103411 Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing

An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network access to cause information disclosure and a denial of service via a malicious DHCP reply...

EUVD-2026-112208

An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network access to cause information disclosure and a denial of service via a malicious DHCP reply...

CVE-2026-103411

The Juniper Networks Session Smart Router is affected by an Integer Underflow vulnerability in the DhcpMessageDecoder component. An attacker with local network access can exploit this flaw by sending a malicious DHCP reply, leading to information disclosure and a denial of service (service crash)...

CVE-2026-103410

The Juniper Networks Session Smart Router is affected by an Integer Overflow vulnerability in its DPI certificate scanner . An unauthenticated remote attacker can exploit this flaw by providing a specially crafted TLS server certificate , resulting in a denial of service (DoS) . Technical details...

CVE-2026-103410 Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection

An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a denial of service via a specially crafted TLS server certificate...

EUVD-2026-112211

An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a denial of service via a specially crafted TLS server certificate...

Security update for perl-Cpanel-JSON-XS

This update for perl-Cpanel-JSON-XS fixes the following issues: CVE-2025-40929: integer overflow bsc1249331. CVE-2026-9334: type confusion via duplicate object keys when dupkeysasarrayref is enabled bsc1267546. CVE-2026-9516: denial of service via UTF-8 BOM prefixed input when a decode filter...

CVE-2026-106971

An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service via crafted MessagePack input when the application runs on 32-bit PHP...

CVE-2026-117608

Assimp through 6.0.5 contains an integer overflow vulnerability in MD2Importer::ValidateHeader that allows attackers to bypass frame table bounds checks using crafted header fields. Attackers can supply a malicious .md2 file whose numFrames and numVertices values wrap the 32-bit size check, causi...