84086 matches found
CVE-2026-92413
A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdfopenfilter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can lead to null pointer dereference. The attack can be launched...
CVE-2026-92417
CVE-2026-92417 is a null pointer dereference in Open5GS (up to version 2.8.0), located in the function ogs_pfcp_parse_volume_measurement within lib/pfcp/types.c of the PFCP Handler component. A remote attacker with low privileges can trigger the defect, resulting in a denial of service (high avai...
EUVD-2026-80936
A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogspfcpparsevolumemeasurement in the library lib/pfcp/types.c of the component PFCP Handler. The manipulation results in null pointer dereference. The attack may be launched remotely. The patch is identified as...
CVE-2026-92417 Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereference
A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogspfcpparsevolumemeasurement in the library lib/pfcp/types.c of the component PFCP Handler. The manipulation results in null pointer dereference. The attack may be launched remotely. The patch is identified as...
CVE-2026-92413 Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereference
A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdfopenfilter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can lead to null pointer dereference. The attack can be launched...
CVE-2026-92413
Artifex MuPDF (up to commit b6d17493700c621c0e70036980a6ebd06d2202c9) is affected by a null pointer dereference in the function pdf_open_filter within the file pdf-stream.c , part of the PDF Xref Loading component. The vulnerability is remotely exploitable but requires user interaction to trigger...
CVE-2026-92413
A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdfopenfilter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can lead to null pointer dereference. The attack can be launched...
EUVD-2026-80896
A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdfopenfilter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can lead to null pointer dereference. The attack can be launched...
Orbit-Fox_SSRF_CVE-2025-10874
CVE-2025-10874 — Proof of Concept SSRF для Orbit Fox Proof of concept эксплойта, демонстрирующий уязвимость Server-Side Request Forgery SSRF в плагине Orbit Fox для WordPress с обходом валидации через null byte инъекцию. Подробная статья в блоге: https://ryanmroth.com/articles/orbit-fox-ssrf Дета...
s26-m1q-ghostlock-selinux
S26 SM-S942U1 / m1q GhostLock CVE-2026-43499 — uid=0 root + KernelSU 激活达成 针对 Samsung Galaxy S26（SM-S942U1，codename m1q，SoC SM8850 骁龙 8 Elite Gen2， 内核 6.12.30-android16-5-android16-5-pd30ff70，Android 16）的 CVE-2026-43499（GhostLock）提权研究。 ✅ 最终结果：uid=0 root + KernelSU 激活达成 root@kitploit: exploit 后通过...
wasm2c-tableflip
Побег из песочницы wasm2c: гостевой модуль выполняет shell-команду на хосте Читайте блог: trustsig.eu/blog Функция wasmrtallocatefuncreftable в wasm2c/wasm-rt-impl-tableops.inc устанавливает table-size из объявленного количества элементов модуля, а затем игнорирует результат calloc. Когда выделен...
CVE-2026-92626
Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/dguardintegration/dguardVersion endpoint dereferences DGuard integration login state that may be unset, raising an unhandled null reference exception. The exception is thrown from an...
kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
A flaw was found in the Linux kernel's crypto QAT QuickAssist Technology module. A race condition exists during the teardown of Virtual Function to Physical Function VF2PF work in the adfdisablesriov function. This allows a concurrently scheduled or already queued worker to attempt to access memo...
CVE-2026-92626
Control iD iDSecure versions prior to 4.8.3.0 are vulnerable to an unauthenticated Denial of Service (CVSS 7.5 HIGH). The root cause lies in the /api/dguardintegration/dguardVersion endpoint, which dereferences a DGuard integration login state that may be unset, raising an unhandled null referenc...
CVE-2026-92626 Control iD iDSecure Unauthenticated Denial of Service
Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/dguardintegration/dguardVersion endpoint dereferences DGuard integration login state that may be unset, raising an unhandled null reference exception. The exception is thrown from an...
EUVD-2026-80804
Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/dguardintegration/dguardVersion endpoint dereferences DGuard integration login state that may be unset, raising an unhandled null reference exception. The exception is thrown from an...
CVE-2026-92123
Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier does not intercept operations performed on a null receiver method calls, property and attribute accesses, and array accesses, allowing attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the...
CVE-2026-92123
CVE-2026-92123 affects the Jenkins Script Security Plugin in versions 1415.v9a_f9b_3a_c253d and earlier . The vulnerability stems from the plugin's failure to intercept operations performed on a null receiver , including method calls, property and attribute accesses, and array accesses. An attack...
CVE-2026-92123
Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier does not intercept operations performed on a null receiver method calls, property and attribute accesses, and array accesses, allowing attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the...
EUVD-2026-80747
Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier does not intercept operations performed on a null receiver method calls, property and attribute accesses, and array accesses, allowing attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the...