770 matches found
subparse
subparse Subparse, is a modular framework developed by Josh Strochein, Aaron Baker, and Odin Bernstein. The framework is designed to parse and index malware files and present the information found during the parsing in a searchable web-viewer. The framework is modular, making use of a core parsin...
CVE-2018-11788
Summary Apache Karaf is a modern and polymorphic applications container. It's a lightweight, powered, and enterprise ready container powered by OSGi. Apache Karaf is a "product project", providing a complete and turnkey runtime. The runtime is "multi-facets", meaning that you can deploy different...
CAPE-parsers
CAPE-parsers CAPE core and community parsers Configs structure CNCs: campaign: str botnet: str dgaseed: hex str version: str mutex: str useragent: str build: str cryptokey: str cryptokeytype: str algorithm. Ex: RC4, RSA public key. salsa20, xchacha20 raw: any other data goes here All CNC entries...
Apache Tika - XML External Entity Injection
Apache Tika tika-core 1.13-3.2.1, tika-pdf-module 2.0.0-3.2.1, and tika-parsers 1.13-1.28.5 contain an XML External Entity injection caused by processing crafted XFA files inside PDFs, letting attackers perform XXE attacks remotely, exploit requires crafted PDF input. id: CVE-2025-66516 info: nam...
CLEANSTART-2026-KY37458 RSA and DSA public key parsers did not enforce size limits on key parameters
CVE-2026-39829 affects multiple packages. The RSA and DSA public key parsers did not enforce size limits on key parameters. See references for individual vulnerability details...
Wireshark 1.4.x < 1.4.12 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.12 advisory. - The ANSI A dissector could dereference a NULL pointer and crash. It may be possible to make Wireshark...
CLEANSTART-2026-EA72905 RSA and DSA public key parsers did not enforce size limits on key parameters
CVE-2026-39829 affects multiple packages. The RSA and DSA public key parsers did not enforce size limits on key parameters. See references for individual vulnerability details...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: ofpart: – Fixed a refcount leak in bcm4908partitionsfwoffset. The function offindnodebypath returns a node pointer with the refcount incremented. We should use ofnodeput on it when it is no longer needed. Add the...
CVE-2026-104861
The probe-image-size library (versions <= 7.3.0) is vulnerable to a quadratic-time Denial of Service (DoS) attack due to inefficient regular expression handling in its SVG parser. Specifically, the regex /]*>/ causes the engine to repeatedly scan to the end of the input whenever it encounte...
CLEANSTART-2026-NG02064 RSA and DSA public key parsers did not enforce size limits on key parameters
Security vulnerability affects the consul package. The RSA and DSA public key parsers did not enforce size limits on key parameters...
CLEANSTART-2026-BW04566 RSA and DSA public key parsers did not enforce size limits on key parameters
Security vulnerability affects the containerd package. The RSA and DSA public key parsers did not enforce size limits on key parameters...
CVE-2026-102728
The NetX Secure software contains two out-of-bounds reads within its client-side TLS/DTLS handshake parsers . The vulnerability occurs because the parsers read fields from a server-supplied message before validating that the message is sufficiently long. Although bounds checks are present and fun...
PT-2026-102794
Name of the Vulnerable Software and Affected Versions NetX Secure affected versions not specified Description Two client-side TLS/DTLS handshake parsers contain bounded out-of-bounds reads. This occurs when the parsers read fields from a server-supplied message before validating if the message is...
CAPE-parsers v0.1.69
CAPE-parsers CAPE core and community parsers Configs structure CNCs: campaign: str botnet: str dgaseed: hex str version: str mutex: str useragent: str build: str cryptokey: str cryptokeytype: str algorithm. Ex: RC4, RSA public key. salsa20, xchacha20 raw: any other data goes here All CNC entries...
expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow
A flaw was found in libexpat, a library used for parsing XML data. An attacker could exploit a heap-based buffer overflow, a type of memory error, by providing specially crafted XML input. This vulnerability occurs when the library mishandles memory reallocation while processing XML, particularly...
SUSE CVE-2026-52857
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, unbounded json, yaml, and xml configuration-file parsers in parser.go can process an oversized non-file parser configuration file and exhaust Wings process memory. This issue is...
EUVD-2026-71234
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers nfcllcpparsegbtlv and nfcllcpparseconnectiontlv contain three related bugs in their TLV parsing loops: 1. 'offset' is declared u8 but tlvarraylen is u16. When TLV data...
PT-2026-91361
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers nfc llcp parse gb tlv and nfc llcp parse connection tlv contain three related bugs in their TLV parsing loops: 1. 'offset' is declared u8 but tlv array len is u16. When TL...
CVE-2026-85062 Colord: Slow rejection of oversized malformed color strings
Colord is a tiny yet powerful tool for high-performance color manipulations and conversions. Prior to 2.9.4, synchronous CSS color string matchers in src/colorModels/rgbString.ts, src/colorModels/hslString.ts, src/colorModels/hwbString.ts, src/colorModels/lchString.ts, and...
SUSE CVE-2026-72374
In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each callback call type handler has a delivery function that parses the incomi...