EUVD-2026-17160

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %expr injection occurs with tabpanel lacking PMLE...

ThreadFuzzer: Fuzzing Framework for Thread Protocol

With the rapid growth of IoT, secure and efficient mesh networking has become essential. Thread has emerged as a key protocol, widely used in smart-home and commercial systems, and serving as a core transport layer in the Matter standard. This paper presents ThreadFuzzer, the first dedicated...

MAL-2025-26525 Malicious code in mle (npm)

The package mle was found to contain malicious code...

Malicious code in mle (npm)

The package mle was found to contain malicious code...

CVE-2024-13667

The Uncode theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mle-description’ parameter in all versions up to, and including, 2.9.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level acces...

CVE-2024-13667 Uncode <= 2.9.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via mle-description

The Uncode theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mle-description’ parameter in all versions up to, and including, 2.9.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level acces...

PT-2025-6592

Name of the Vulnerable Software and Affected Versions Uncode theme for WordPress versions up to, and including, 2.9.1.6 Description The issue is related to Stored Cross-Site Scripting, which occurs due to insufficient input sanitization and output escaping. This allows authenticated attackers wit...

CVE-2024-13667: Improper Neutralization of Input During Web Page Generation

The Uncode theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mle-description’ parameter in all versions up to, and including, 2.9.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level acces...

MAL-2024-1108 Malicious code in mle-py-connector (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91bb80bd9d7444d113ce05b2d2abac925c10e36a23ae955fd9ebd682cd046bd1 The OpenSSF Package Analysis project identified 'mle-py-connector' @ 5.9.1 pypi as malicious. It is considered malicious because: - The package...

Malicious code in mle-py-connector (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91bb80bd9d7444d113ce05b2d2abac925c10e36a23ae955fd9ebd682cd046bd1 The OpenSSF Package Analysis project identified 'mle-py-connector' @ 5.9.1 pypi as malicious. It is considered malicious because: - The package...

atacworks (0.3.4), bigraph (>=0.1.0rc5, <=0.1.0rc7) +8 more potentially affected by CVE-2022-40897 via setuptools (51.1.2)

setuptools PYPI version 51.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - atacworks 0.3.4 - bigraph =0.1.0rc5, =0.7.5, =2.0.7, =0.1.3, =0.0.1, =0.1.3, =1.11.69, =0.1.0, =1.0.5, =1.0.8.1 Source cves: CVE-2022-40897...

OSV-2020-721 Stack-buffer-overflow in ot::NetworkData::NetworkData::GetNextOnMeshPrefix

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13334 Crash type: Stack-buffer-overflow WRITE Crash state: ot::NetworkData::NetworkData::GetNextOnMeshPrefix ot::Dhcp6::Dhcp6Client::UpdateAddresses ot::Mle::Mle::HandleStateChanged...

OSV-2020-690 UNKNOWN READ in ot::Coap::CoapBase::RemoveResource

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13369 Crash type: UNKNOWN READ Crash state: ot::Coap::CoapBase::RemoveResource ot::MeshCoP::BorderAgent::Stop ot::Mle::Mle::SetStateDetached...

OSV-2020-496 Stack-buffer-overflow in ot::Mle::Mle::HandleParentResponse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15382 Crash type: Stack-buffer-overflow READ Crash state: ot::Mle::Mle::HandleParentResponse ot::Mle::Mle::HandleUdpReceive ot::Ip6::Udp::HandleMessage...

OSV-2020-369 UNKNOWN READ in ot::TimerScheduler::Remove

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13383 Crash type: UNKNOWN READ Crash state: ot::TimerScheduler::Remove ot::Mle::Mle::Stop otThreadSetEnabled...

PT-2020-22276

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported with an UNKNOWN READ crash type. The crash state includes functions such as TimerScheduler::Remove, Mle::Mle::Stop, and...

PT-2020-22499

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A stack buffer overflow issue is reported, which can cause a crash. The crash occurs in the NetworkData::GetNextOnMeshPrefix, Dhcp6Client::UpdateAddresses,...

PT-2020-22269

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue. The crash state involves several functions, including Ip6::NetifUnicastAddress::GetNext,...

PT-2020-22466

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A stack-buffer-overflow READ 1 crash has been reported. The crash involves the NetworkData::PrefixMatch, NetworkData::LeaderBase::GetContext, and...

PT-2020-22357

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read crash. The crash state indicates involvement of functions such as HandleParentResponse,...