CVE-2026-107437

The GV-E-Map Server V18.2.0A contains a plaintext database password hard-coded within an application component. An attacker can recover these credentials by performing static analysis on the distributed binary or by accessing the process memory during runtime. This vulnerability leads to a high c...

CVE-2026-107437: Use of Hard-coded Credentials

GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime...

PT-2026-110432

Name of the Vulnerable Software and Affected Versions GV-E-Map Server version 18.2.0A Description An application component contains a plaintext database password. This credential can be recovered by performing static analysis on the distributed binary or may be exposed in process memory during...

telegram-nearby-map

Telegram Nearby Map Telegram Nearby Map utiliza OpenStreetMap y la biblioteca oficial de Telegram para encontrar la posición de los usuarios cercanos. Ten en cuenta: La API de Telegram se actualizó hace un tiempo para hacer menos precisas las distancias de los usuarios cercanos, impidiendo el...

CVE-2007-2447

ExploitDev Journey 6 | CVE-2007-2447 | Samba 3.0.20 3.0.25rc 'Username' map script' Command Execution Original Exploit: https://www.exploit-db.com/exploits/16320 Exploit name: Samba username map script RCE CVE : 2007-2447 Lab : Lame - HackTheBox Description There is a vulnerability in Samba...

SUSE CVE-2026-78659

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

CLEANSTART-2026-XM40960 source-map-js through 1

Security vulnerability affects the n8n package. source-map-js through 1...

PT-2026-117912

Security vulnerability affects the n8n package. source-map-js through 1...

EUVD-2026-95327

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map...

CVE-2026-78659

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-107694 CVE-2026-78659 affecting package libcontainers-common 20240213-3

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-107282 CVE-2026-78659 affecting package cri-tools 1.32.0-8

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

CVE-2026-78659

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

CVE-2026-78659

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

CVE-2026-84230

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map...

CVE-2026-84230

IBM Guardium Data Protection version 12.2.2 is vulnerable to a denial of service (DoS) attack. The root cause is a race condition (CWE-362) triggered by concurrent unsynchronized writes to a shared map. A remote attacker can exploit this to cause the service to become unavailable. IBM has release...

CVE-2026-84230 IBM Guardium Data Protection is affected by multiple vulnerabilities

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map...

AZL-106860 CVE-2026-107298 affecting package msgpack 3.3.0-1

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...

CVE-2026-107298

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...

CVE-2026-107298 msgpack5: Deeply nested input can exhaust the decoder stack

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...