5736 matches found
Netty: [Bzip2Decoder] Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang
The Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the event-loop thread in an infinite loop. The vulnerability exists in the run-length encoding RLE state machine within...
GHSA-558V-64GR-WGG4 Netty: [Bzip2Decoder] Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang
The Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the event-loop thread in an infinite loop. The vulnerability exists in the run-length encoding RLE state machine within...
GO-2026-6054 Gitea: Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs in gitea.dev
Gitea: Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs in gitea.dev...
NPM: n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool
NPM: n8n: AI Agents Project Viewer Privilege Escalation via runnodetool vulnerability discovered by ? in WordPress Npm n8n versions 2.29.8...
Incorrect Authorization
Overview n8n is a n8n Workflow Automation Tool Affected versions of this package are vulnerable to Incorrect Authorization in the runnodetool function in the agents module. An attacker can gain unauthorized access to credential secrets and execute arbitrary nodes by interacting with an agent that...
PT-2026-63549
Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.136.Final Netty versions prior to 4.2.16.Final Description The Bzip2Decoder handler in the compression codec pipeline is susceptible to a denial-of-service attack. A malformed bzip2 stream can trigger an infinite lo...
Check Point SmartConsole Authentication Bypass Run Script RCE
This module exploits CVE-2026-16232, an authentication bypass in the Check Point SmartConsole login process affecting Security Management Server and Multi-Domain Security Management Server. A vulnerable management server accepts a client-supplied SIC distinguished name during an application...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack through the tmpfiles.d configuration process. An attacker can overwrite arbitrary files by creating a symbolic link that redirects a privileged write operation to a file of their choosing. This is only exploitable if a...
n8n-nodes-metasploit
n8n-nodes-metasploit !npm versionhttps://img.shields.io/n...
CVE-2026-8933: Local Privilege Escalation in Set-Capabilities snap-confine
The Qualys Threat Research Unit TRU has identified a Local Privilege Escalation LPE vulnerability in snap-confine CVE-2026-8933. This flaw allows an unprivileged local user to gain full root access on default installations of Ubuntu Desktop 24.04, 25.10, and 26.04. The issue stems from a security...
CVE-2024-5300
The CVE concerns Canonical snapd’s base AppArmor profile misconfiguration. Abstraction rules in /etc/apparmor.d/abstractions/nss-systemd allow strictly confined snaps to access io.systemd.Multiplexer and io.systemd.NameServiceSwitch sockets in /run/systemd/userdb/, bypassing sandbox restrictions....
CVE-2026-39879
A flaw was found in syslog-ng. An attacker on an adjacent network can exploit a missing sanitization call in the afsqlddrunquery function, leading to a SQL injection vulnerability. This vulnerability, when the SQL driver is manually configured, can result in a denial of service and allow for...
EUVD-2026-43752
Pillow TGA RLE encoder can serialize up to 57 KB of adjacent heap data into generated images...
llm-redteam-helixpay
Red-teaming an LLM support agent — HelixPay A self-contained...
CVE-2026-47144
Shamefile is a linter for undocumented linter warnings. Prior to version 0.1.7, a path traversal vulnerability in shame next allows an attacker-controlled shamefile.yaml to disclose contents of files outside the repository, one line at a time, to the terminal of a user who runs the command. See...
EUVD-2026-46117
Shamefile is a linter for undocumented linter warnings. Prior to version 0.1.7, a path traversal vulnerability in shame next allows an attacker-controlled shamefile.yaml to disclose contents of files outside the repository, one line at a time, to the terminal of a user who runs the command. See...
CVE-2026-47128 nono: Sandbox escape on Linux via D-Bus: `systemd-run --user`
nono is software that allows users to run AI agents in a zero-latency sandbox. Prior to version 0.55.0, the nono Landlock/seccomp policies allow access to local Unix domain sockets concrete and abstract. This allows an easy sandbox escape by talking to the per-user systemd dbus socket. Version...
CVE-2026-39879
Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...
CVE-2026-39879
Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...
CVE-2026-39879
Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...