CVE-2026-92238

CVE-2026-92238 affects Thunderbird , the Mozilla email client. The vulnerability involves ambiguous parsing of mail headers , where a maliciously constructed header could cause multiple fields to be parsed as a single field, or lead to potential memory safety violations . The issue was fixed in T...

EUVD-2026-79242

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16...

CVE-2026-92238 Ambiguous parsing of mail headers

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2025-47917

CVE-2025-47917 漏洞利用（mbedTLS 中的 Use-After-Free） 作者 : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-47917 漏洞类型 : mbedTLS 3.6.4 名称解析中的 Use-After-Free（UAF） 描述 该仓库包含一个针对 mbedTLS 库中 mbedtlsx509stringtonames 名称解析函数内 Use-After-Free 漏洞的利用程序。成功利用该漏洞可通过劫持已释放的堆元数据并将控制流重定向到注入的 shellcode，实现以 root 权限执行任意代码...

zeek-elf

Zeek ELF 包 该包实现了： ELF 太长不看！ 如果你已经安装了 zkg，并且已经运行过... root@kitploit: zkg autoconfig ...那么你可以像这样安装该包： root@kitploit: sudo zkg install zeek-elf 现在，在任何 Zeek 脚本中，只需加载该插件，它就能“直接工作”： root@kitploit: @load Zeek/ELF 该插件的新事件可在 events.bif 中找到。 构建与安装 该插件可以通过以下方式构建： root@kitploit: ./configure...

zeek-openvpn

zeek::openvpn ================================= 本项目已弃用，推荐使用 https://github.com/corelight/zeek-spicy-openvpn 一个用于在以下模式下检测和解析 OpenVPN 的插件： UDP w/ TLS UDP w/ TLS & TLS Auth TCP w/ TLS TCP w/ TLS & TLS Auth 到目前为止，该插件尚不能检测 UDP 或 TCP 的共享密钥模式。 如果此协议分析器能够解析 TLS 信息，你将在 ssl.log 中找到相关数据。TCP TLS 支持已可用，而 UDP...

CVE-2026-92178

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...

CVE-2026-92177

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92179

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-19886

OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-19885

OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the targ...

CVE-2026-19781

Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targe...

EUVD-2026-79190

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HeaderP.parse uses a case-sensitive substring test for the Transfer-Encoding value and decodes header bytes with the platform default charset. Values such as Chunked are not recognized, values such as notchunke...

CVE-2026-69205 Http4s: Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HeaderP.parse uses a case-sensitive substring test for the Transfer-Encoding value and decodes header bytes with the platform default charset. Values such as Chunked are not recognized, values such as notchunke...

CVE-2026-69205 Http4s: Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HeaderP.parse uses a case-sensitive substring test for the Transfer-Encoding value and decodes header bytes with the platform default charset. Values such as Chunked are not recognized, values such as notchunke...

CVE-2026-69205

Http4s (a Scala HTTP library) is affected in its Ember backend, specifically the HeaderP.parse function, which uses a case-sensitive substring test for the Transfer-Encoding value and decodes header bytes with the platform default charset. This causes mismatches with RFC-compliant intermediaries,...

CVE-2022-0778

CVE-2022-0778 発見された脆弱性は、楕円曲線鍵の解析中にOpenSSLのBNmodsqrt関数で無限ループを引き起こします。つまり、悪意を持って細工されたX.509証明書により、パッチが適用されていないサーバーでDoSが発生する可能性があります。...

external_expat_2.1.0_CVE-2022-43680

Expat, Release 2.1.0 这是 Expat，一个用于解析 XML 的 C 语言库，由 James Clark 编写。 Expat 是一个流式 XML 解析器。这意味着你需要在开始解析之前向解析器注册处理器。当解析器在文档中发现相关结构时，这些处理器会被调用。开始标签就是你可以为其注册处理器的结构类型之一。 Windows 用户应使用 expatwin32bin 包，其中包含预编译的库和可执行文件，以及供开发者使用的源代码。 Expat 是自由软件。你可以根据本包中 COPYING 文件所含许可证的条款复制、分发和修改它。该许可证与 MIT/X Consortium...

CVE-2026-12667

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to read files from a vulnerable .NET client or cause limited...

CVE-2021-3156

CVE-2021-3156 在本文件中，我们包含了理解本仓库代码及其工作原理所需的所有知识。所有解释均基于 QUALYS 发布的报告。其中还解释了更多利用形式。 要求 受影响的 sudo 版本为 1.8.2 到 1.8.31p2 的旧版本以及 1.9.0 到 1.9.5p1 的所有稳定版本，且均采用默认配置。 本仓库已在 Ubuntu 20.04（sudo 1.8.31）上测试。在此环境中，我们以 root 权限打开一个终端。 分析 如果 Sudo 以 shell 模式执行命令： 通过 -s 选项，该选项设置 sudo 的 MODESHELL 标志。 通过 -i 选项，该选项设置 sud...