CVE-2026-25873: Deserialization of Untrusted Data

OmniGen2-RL contains an unauthenticated remote code execution vulnerability in the reward server component that allows remote attackers to execute arbitrary commands by sending malicious HTTP POST requests. Attackers can exploit insecure pickle deserialization of request bodies to achieve code...

PT-2026-26152

OmniGen2-RL contains an unauthenticated remote code execution vulnerability in the reward server component that allows remote attackers to execute arbitrary commands by sending malicious HTTP POST requests. Attackers can exploit insecure pickle deserialization of request bodies to achieve code...

Malicious code in @zalastax/nolb-react-rl (npm)

The package @zalastax/nolb-react-rl was found to contain malicious code...

CVE-2020-36768

A vulnerability was found in rl-institut NESP2 Initial Release/1.0. It has been classified as critical. Affected is an unknown function of the file app/database.py. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

Malicious code in offline-rl-congestion-control (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1c144e79980c0e56341b733c970e59592e1f56df443f7d1b41668ca35ec4cc11 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in rl-vm-scheduling (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8870fa73789eeccaedbe34d9bcf74ee3b438699c49a0e5b984055bcb5c86542f A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10836 Malicious code in offline-rl-congestion-control (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1c144e79980c0e56341b733c970e59592e1f56df443f7d1b41668ca35ec4cc11 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

CVE-2024-43790: Heap-based Buffer Overflow

Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of the screen in a buffer msgbuf. When right-left mode :set rl is enabled, the search pattern is reversed. This...

Intel BIOS Firmware CVE-2022-26837 (INTEL-SA-00717)

The version of the Intel BIOS on the remote device is affected by a vulnerability as identified in the INTEL-SA-00717 advisory. - Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

rl-astech.com Improper Access Control vulnerability OBB-3809249

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-36768

A vulnerability was found in rl-institut NESP2 Initial Release/1.0. It has been classified as critical. Affected is an unknown function of the file app/database.py. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

Sql injection

A vulnerability was found in rl-institut NESP2 Initial Release/1.0. It has been classified as critical. Affected is an unknown function of the file app/database.py. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

CVE-2020-36768 rl-institut NESP2 database.py sql injection

A vulnerability was found in rl-institut NESP2 Initial Release/1.0. It has been classified as critical. Affected is an unknown function of the file app/database.py. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

CVE-2020-36768

CVE-2020-36768 affects rl-institut NESP2 Initial Release/1.0. The vulnerability is a SQL injection in an unknown function of app/database.py that can be triggered remotely. Multiple sources publicly disclose the exploit and recommend applying patch 07c0cdf36cf6a4345086d07b54423723a496af5e to fix ...

PT-2023-11905 · Rl Institut · Nesp2

Name of the Vulnerable Software and Affected Versions: rl-institut NESP2 version 1.0 Description: A critical issue has been found, allowing for sql injection through an unknown function in the file app/database.py. This can be exploited remotely. The issue has been publicly disclosed and a patch ...

CVE-2020-36768: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in rl-institut NESP2 Initial Release/1.0. It has been classified as critical. Affected is an unknown function of the file app/database.py. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

rlcosmeticsurgery.com Cross Site Scripting vulnerability OBB-3336031

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rl-berthold-und-partner.de Cross Site Scripting vulnerability OBB-3229842

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2019-13952: Out-of-bounds Write

The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...

CVE-2019-13951: Out-of-bounds Write

The setipv4 function in zscanrfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data...