4164 matches found
CVE-2026-116312
PostgreSQL versions 15 through 18 are affected by a vulnerability where an inconsistent transition-capture state in the MERGE command can lead to incorrect behavior. Specifically, a table data modifier can cause an AFTER trigger to process the wrong new row when performing a MERGE on a partitione...
CVE-2026-114467 Out-of-bounds Write in Git
Out-of-bounds write possible in Git when git-merge1 used on tag with more than two GPG signatures...
CVE-2026-114467
A flaw in Git allows an authenticated remote attacker to cause a Denial of Service (DoS) by corrupting stack memory. The vulnerability occurs during merge operations when git-merge(1) attempts to remove more than two GPG (GNU Privacy Guard) signatures from commit messages. An attacker can trigger...
CVE-2026-126801
Rote 1.2.0 through 2.6.0 contains an authorization bypass in the OAuth bind/merge endpoint that allows authenticated users to merge any OAuth-bound account into their own. Attackers can submit a public existingUserId and GitHub or Apple user ID to take over notes, attachments, and API keys and...
CVE-2026-126801
Rote versions 1.2.0 through 2.6.0 are vulnerable to an authorization bypass in the OAuth bind/merge endpoint. This flaw allows authenticated users to merge any OAuth-bound account into their own by submitting a public existingUserId and a GitHub or Apple user ID . Successful exploitation results ...
CVE-2026-126801 Rote 1.2.0 through 2.6.0 Account Takeover via OAuth Account Merge Endpoint
Rote 1.2.0 through 2.6.0 contains an authorization bypass in the OAuth bind/merge endpoint that allows authenticated users to merge any OAuth-bound account into their own. Attackers can submit a public existingUserId and GitHub or Apple user ID to take over notes, attachments, and API keys and...
EUVD-2026-124016
Rote 1.2.0 through 2.6.0 contains an authorization bypass in the OAuth bind/merge endpoint that allows authenticated users to merge any OAuth-bound account into their own. Attackers can submit a public existingUserId and GitHub or Apple user ID to take over notes, attachments, and API keys and...
CVE-2026-126801
Rote 1.2.0 through 2.6.0 contains an authorization bypass in the OAuth bind/merge endpoint that allows authenticated users to merge any OAuth-bound account into their own. Attackers can submit a public existingUserId and GitHub or Apple user ID to take over notes, attachments, and API keys and...
SUSE CVE-2026-105437
Affected versions of Git have a heap buffer overflow in the three-way merge code xdiff, which an attacker can trigger through a repository they control. When Git merges a file, it first adds up the size of the merged output, allocates a buffer of that size, and then writes the output into it. Tha...
CVE-2026-114467
A flaw was found in git. An authenticated remote attacker can cause a Denial of Service DoS by corrupting stack memory during merge operations. This issue occurs when git attempts to remove more than two GPG GNU Privacy Guard signatures from commit messages. By submitting a specially crafted comm...
Vulnerability fixed in GitLab
GitLab has addressed a vulnerability in GitLab Community Edition CE and Enterprise Edition EE. The vulnerability is an heap buffer overflow caused by improper handling of large conflict marker sizes in malicious repositories. This can lead to heap corruption or application crash during merge...
CVE-2020-8554
Create Kubernetes cluster kind create cluster --config ./kind.yaml The cluster must have certmanager: https://cert-manager.io/docs/installation/kubernetes/ Test vulnerability kubectl apply -f - 'EOF' apiVersion: v1 kind: Namespace metadata: name: kubeproxy-mitm --- apiVersion: apps/v1 kind:...
Exploit for CVE-2026-105437
CVE-2026-105437 — Git three-way merge heap buffer overflow |...
CVE-2026-23416-POC
CVE-2026-23416 — PoC mm/mseal: update VMA end correctly on merge Vulnerability discovered by Antonius / Blue Dragon Security Overview Field| Detail ---|--- CVE ID| CVE-2026-23416 Subsystem| mm/mseal — mm/vma.c Affected| Linux kernel 6.17 through 7.0-rc5 Fixed in| Linux 7.0-rc6, stable backports...
revng
The rev.ng binary analysis framework and decompiler Welcome to the rev.ng project! rev.ng is an open source binary analysis framework based on LLVM and QEMU. It features a full-fledged decompiler. It's developed by rev.ng Labs in the open. Getting started Head to the online documentation to get...
CVE-2026-105437
Affected versions of Git have a heap buffer overflow in the three-way merge code xdiff, which an attacker can trigger through a repository they control. When Git merges a file, it first adds up the size of the merged output, allocates a buffer of that size, and then writes the output into it. Tha...
PT-2026-145458
Rote 1.2.0 through 2.6.0 contains an authorization bypass in the OAuth bind/merge endpoint that allows authenticated users to merge any OAuth-bound account into their own. Attackers can submit a public existingUserId and GitHub or Apple user ID to take over notes, attachments, and API keys and...
CVE-2026-126801: Rabithua Rote: Rote 1.2.0 through 2.6.0 contains an authorization bypass in the OAuth bind/merge endpoint that allows authenticated…
Rote 1.2.0 through 2.6.0 contains an authorization bypass in the OAuth bind/merge endpoint that allows authenticated users to merge any OAuth-bound account into their own. Attackers can submit a public existingUserId and GitHub or Apple user ID to take over notes, attachments, and API keys and...
CVE-2020-8158
CVE-2020-8158: TypeORM Prototype Pollution Vulnerability Overview This is a proof-of-concept demonstrating CVE-2020-8158, a critical prototype pollution vulnerability in TypeORM versions = 0.2.25 package.json - Dependencies Setup Instructions See SETUP.md for detailed setup and exploitation...
AZL-113311 CVE-2026-105437 affecting package git 2.45.4-3
Affected versions of Git have a heap buffer overflow in the three-way merge code xdiff, which an attacker can trigger through a repository they control. When Git merges a file, it first adds up the size of the merged output, allocates a buffer of that size, and then writes the output into it. Tha...