107 matches found
Improper Encoding or Escaping of Output
Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via message routing in the System.Net.Mail SMTP client. An attacker can spoof email messages by exploiting flaws in the SMTP client during message routing, causing messages to appear as though the...
Race condition Apache Kafka Dependency in Bitbucket Data Center
This High severity Race condition vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Bitbucket Data Center. This Race condition vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N allows an...
Spring for Apache Kafka: Improper Validation of Retry Topic Header Values Leads to Retry Sequence Manipulation
Spring Kafka's retry topic infrastructure did not sufficiently validate user-controlled header values before acting on them. A producer could send a record with a crafted retrytopic-attempts header to supply an out-of-range attempt count and cause the retry topic router to misidentify where the...
Duplicate Advisory: OpenClaw: Discord Component Interaction Misclassifies Group DM as Direct Message
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6336-qqw9-v6x6. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.31 contains a logic error in Discord component interaction routing that misclassifies group...
CVE-2026-31420
In the Linux kernel, the following vulnerability has been resolved: bridge: mrp: reject zero test interval to avoid OOM panic brmrpstarttest and brmrpstartintest accept the user-supplied interval value from netlink without validation. When interval is 0, usecstojiffies0 yields 0, causing the...
CVE-2026-32975 OpenClaw < 2026.3.12 - Weak Authorization via Mutable Group Names in Zalouser Allowlist
OpenClaw before 2026.3.12 contains a weak authorization vulnerability in Zalouser allowlist mode that matches mutable group display names instead of stable group identifiers. Attackers can create groups with identical names to allowlisted groups to bypass channel authorization and route messages...
CVE-2026-24282
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
The vulnerability of the Push Message Routing Service in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Push Message Routing Service in Windows operating systems stems from the operation of data out of the buffer into memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
EUVD-2026-10600
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
CVE-2026-24282
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
CVE-2026-24282
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
CVE-2026-24282 Push message Routing Service Elevation of Privilege Vulnerability
...
CVE-2026-24282 Push message Routing Service Elevation of Privilege Vulnerability
...
CVE-2026-24282
CVE-2026-24282 is a Microsoft-related local-elevation vulnerability labeled as a Push message Routing Service issue. The CVSS 3.1 base score is 5.5 (MEDIUM) with Confidentiality impact High, and Exploit Code Maturity is UNPROVEN. The attack vector is Local and requires Low privileges with no user...
Push message Routing Service Elevation of Privilege Vulnerability
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
PT-2026-24278
Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An out-of-bounds read issue exists in the Push Message Routing Service. Exploitation of this issue may allow an authorized attacker to disclose information locally. The issue involve...
CVE-2026-24282: Out-of-bounds Read
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
EUVD-2018-7516
Malware in sbrugna...