CVE-2026-63074

A flaw was found in OpenSSL. The CMP Certificate Management Protocol implementation does not clear cached additional certificates when an invalid message is received, leading to excessive memory consumption. This allows a malicious client to repeatedly send requests containing unique extra...

CVE-2026-74939-escape-the-mac-n-cheese-box

CVE-2026-74939 — Firefox content→parent Privilegienerweiterung Proof-of-Concept für einen Sandbox-Escape in Firefox 149.0a1 Nightly 2fbc0748c4, vor dem Fix. Ein kompromittierter Content-Prozess fälscht eine IPDL-Nachricht, die den Parent dazu bringt, eine Seite in einem privilegierten...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through osslcmpmsgcheckupdate in crypto/cmp/cmpvfy.c. An attacker can drive unbounded memory growth by repeatedly sending CMP messages with unique extraCerts that are rejected during...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference due to insufficient type checking in osslcmpcalcprotection in crypto/cmp/cmpprotect.c. An attacker can crash a CMP server or client by sending a crafted PBM-protected message whose protectionAlg parameter uses t...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the chacha20poly1305cipher and aesocbcipher implementations under providers/implementations/ciphers/. An attacker can forge messages by supplying an empty ciphertext and a bad tag, then...

AZL-97941 CVE-2026-63076 affecting package openssl 3.3.7-4

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...

Exploit for Improper Isolation or Compartmentalization in Mozilla Firefox

CVE-2026-4692 — content processes can declare themselves in RD...

CVE-2025-61765_PoC

Riepilogo Una vulnerabilità di esecuzione remota di codice in python-socketio nelle versioni precedenti alla 5.14.0 consente agli aggressori di eseguire codice Python arbitrario tramite deserializzazione malevola di pickle in distribuzioni multi-server in cui l'aggressore ha precedentemente...

apache__rocketmq_CVE-2023-33246_5-1-0

Apache RocketMQ...

CVE-2025-51869

CVE-2025-51869 Descrizione della vulnerabilità Liner è un motore di ricerca AI affidabile con oltre 10 milioni di utenti in tutto il mondo. Liner costruisce un motore di ricerca basato su LLM, che è vulnerabile a un Insecure Direct Object Reference IDOR nel suo componente chat. Un attaccante può...

Erlang-OTP-SSH-CVE-2025-32433

✅ Risultato Il server ha risposto a un SSH message ID 80 0x50 — che è riservato alla post-autenticazione. Questo dimostra che il server accetta messaggi non validi durante la fase pre-autenticazione, indicando un comportamento vulnerabile come definito in CVE-2025-32433. 📖 Sommario della ricerca ...

Exploit for Improper Isolation or Compartmentalization in Mozilla Firefox

CVE-2026-12295 — srcdoc data on a non-about:srcdoc URI Firefo...

DEBIAN-CVE-2026-77634

CakePHP is a rapid development framework for PHP. Prior to versions 4.5.12, 4.6.5, 5.1.8, 5.2.14, and 5.3.7 on their respective release lines, custom mail headers added with Message::setHeaders or Message::addHeaders do not have CRLF bytes removed, allowing header injection when user-controlled...

CVE-2026-77634

CakePHP , a PHP rapid development framework, is affected by a CRLF header injection vulnerability in its mail transport layer. Custom mail headers added via Message::setHeaders() or Message::addHeaders() do not strip CRLF bytes, allowing an attacker to inject arbitrary headers when user-controlle...

CVE-2026-77634 CakePHP: SmtpTransport vulnerable to CRLF header injection

CakePHP is a rapid development framework for PHP. Prior to versions 4.5.12, 4.6.5, 5.1.8, 5.2.14, and 5.3.7 on their respective release lines, custom mail headers added with Message::setHeaders or Message::addHeaders do not have CRLF bytes removed, allowing header injection when user-controlled...

CVE-2026-75369

An out-of-bounds read vulnerability in the CAN::Application::parsePerformFunctionMessage component of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted CAN message...

CVE-2026-75368

A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted ECSS TC message...

Exploit for Improper Privilege Management in Mozilla Firefox

CVE-2026-74939 — Firefox content→parent privilege escalation...

CVE-2026-75370

An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted CAN message...

CVE-2026-71914

Multiple DrayTek VigorAP models contain a command injection vulnerability in the drayapm component. The vulnerability is caused by insufficient validation of UDP message content after STARTSPEEDTEST before command execution. A remote attacker can trigger this vulnerability via a crafted message t...