CVE-2026-100074

A flaw was found in the Linux kernel's extended Berkeley Packet Filter eBPF subsystem. The BPF Type Format BTF validator failed to enforce that reference count bpfrefcount fields are unique within data structures. A local user with permissions to load eBPF programs could exploit this flaw by...

CVE-2026-98274

A flaw was found in the Linux kernel's networking subsystem. A local user could trigger a Denial of Service DoS or system instability by configuring a network socket to use both PSP encryption and a TCP Upper Layer Protocol ULP, such as TLS. Because these features conflict in how they track...

CVE-2026-97450

A flaw was found in the Linux kernel's ACPICA Advanced Configuration and Power Interface Component Architecture subsystem. The event handler routines fail to validate object types before reading handler fields in functions such as acpievhasdefaulthandler. A local user or environment with...

CVE-2026-119601

A flaw was found in afflib. An attacker could exploit this vulnerability by supplying a specially crafted Advanced Forensic Format AFF image file containing mismatched page and sector sizes. When processed by an affected tool, this flaw causes a heap out-of-bounds write, resulting in memory...

CVE-2026-119591

A flaw was found in SQLite. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing the host application. By supplying a specially crafted database file or SQL query that performs a count operation over a large multi-row VALUES clause, an attacker can trigger excessive...

CVE-2026-119563

A flaw was found in phpMyAdmin. This stored cross-site scripting XSS vulnerability allows an authenticated database user with table creation privileges to execute arbitrary script in another user's browser session. By creating a database table with a name containing malicious markup, the unescape...

CVE-2026-119554

A flaw was found in Moodle's External database enrolment plugin. This vulnerability allows an authenticated attacker with course editing privileges to inject malicious SQL Structured Query Language commands through the course identification number field. During scheduled synchronization with...

CVE-2026-119378

A flaw was found in SQLite. A use-after-free vulnerability in the R-Tree extension allows an attacker to cause a Denial of Service DoS by convincing a user or service to process a specially crafted database. By manipulating internal shadow tables used by the extension, the application improperly...

CVE-2026-75880

A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An authenticated client could exploit this vulnerability by attaching a consumer with a selector containing crafted wildcard usage. This action leads to excessive evaluation during message delivery attempts, occupying a shared broker...

CVE-2021-41160

CVE-2021-41160 FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client...

CVE-2026-85473

A flaw was found in auth0/java-jwt. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a JSON Web Token JWT containing an out-of-range timestamp claim. Because the issue occurs during token parsing before cryptographic signature verification, processing these malforme...

poc_CVE-2025-1716

pocCVE-2025-1716...

CVE-2026-119373

A flaw was found in SQLite. A heap-based buffer overflow exists in the Full-Text Search 5 FTS5 extension during the merging of prefix document lists. An attacker capable of inserting negative row identifiers into a configured table and executing a prefix search query can cause data to be written...

EUVD-2026-114008

A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on Google Cloud Platform allows an authenticated attacker to execute arbitrary code using a maliciously crafted serialized object. This vulnerability was...

CVE-2026-61627

The libass subtitle renderer (used in players like mpv , VLC , and FFmpeg ) contains a heap-buffer overflow in the wrap_lines_measure function. When rendering malicious ASS/SSA content, specifically lines ending with literal backslash-n sequences in certain wrap modes, the measurement loops can o...

CVE-2026-61627 libass: Out-of-bounds read and write in wrap_lines_measure

libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. Prior to 0.17.5, libass can overread and overwrite the glyph array in wraplinesmeasure while rendering malicious ASS content. In wrap modes other than two, a final line ending with a...

CVE-2026-61627 libass: Out-of-bounds read and write in wrap_lines_measure

libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. Prior to 0.17.5, libass can overread and overwrite the glyph array in wraplinesmeasure while rendering malicious ASS content. In wrap modes other than two, a final line ending with a...

EUVD-2026-114007

libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. Prior to 0.17.5, libass can overread and overwrite the glyph array in wraplinesmeasure while rendering malicious ASS content. In wrap modes other than two, a final line ending with a...

CVE-2026-61627 libass: Out-of-bounds read and write in wrap_lines_measure

libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. Prior to 0.17.5, libass can overread and overwrite the glyph array in wraplinesmeasure while rendering malicious ASS content. In wrap modes other than two, a final line ending with a...

CVE-2017-9430

i,am Gihad from Libya !! DNSTracer-1.8.1---Buffer-Overflow CVE-2017-9430 What Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a command line with a long name argument that is...