CVE-2026-55862

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multiple ixml DOM traversal functions process deeply nested XML with unbounded recursion. The iterative XML parser accepts the document, but ixmlPrintDomTreeRecursive in ixml/src/ixml.c and...

EUVD-2026-102927

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multiple ixml DOM traversal functions process deeply nested XML with unbounded recursion. The iterative XML parser accepts the document, but ixmlPrintDomTreeRecursive in ixml/src/ixml.c and...

PT-2026-115639

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multiple ixml DOM traversal functions process deeply nested XML with unbounded recursion. The iterative XML parser accepts the document, but ixmlPrintDomTreeRecursive in ixml/src/ixml.c and ixmlNode...

GHSA-WWV9-G5X4-966Q SFTPGo source-side file-pattern filter bypass during copy operations

Summary File pattern filters deniedpatterns / allowedpatterns were evaluated on the destination of a copy only. A user holding the copy permission could copy a file denied by the filters to a permitted name and then read it. A recursive directory copy reproduced the contents of a restricted...

CVE-2026-85045

CVE-2026-85045 A training poc I cooked up while going after the larger chains. Maglev reuses one mutable HeapNumber while materializing recursive deoptimization frames. The exact upstream trigger produces 0,3,3,3 on both 148 builds and 152.0.7977.75, versus 0,1,2,3 on fixed 152.0.7977.82. Load...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: spufs: Fixing gang directory lifetimes Prior to “POWERPC spufs: Fix gang destroy leaks”, we had a problem with gang lifetimes. When a gang was created, it would return an opened gang directory, which is normally removed when t...

Astra Linux – Vulnerability in pyasn1

pyasn1 is a generic ASN.1 library for Python. Prior to version 0.6.3, the pyasn1 library was vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion during the decoding of ASN.1 data with deeply nested structures. An attacker could provide a crafted payload containing...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fixed recursive locking in configfsopenfile. In flushwritebuffer, the variable &p-fragsem is acquired, and then the loaded store function is called—specifically, targetcoreitemdbrootstore. This function calls...

RUSTSEC-2026-0359 Stack overflow dropping a long chain of recursive types

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-wjc8-633q-pwxr For more information see the GitHub-hosted security advisory...

Unity Linux 20.1070a Security Update: grafana-pcp (UTSA-2026-130153)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130153 advisory. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. Tenable has extracted the preceding description...

CVE-2026-93202

A flaw was found in the i3c master driver of the Linux kernel. This vulnerability occurs due to recursive locking during device registration, where the system attempts to acquire the same lock multiple times. A local attacker could potentially trigger this condition, leading to a system deadlock...

Security update for bind

This update for bind fixes the following issues: CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver bsc1280432. CVE-2026-19666: Use-after-free in...

SUSE-SU-2026:4635-1 Security update for bind

This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver bsc1280432. - CVE-2026-19666: Use-after-free in...

p5-Plack -- Multiple vulnerabilities

Plack project reports: SECURITY Fix memory leak of every request env in Plack::Middleware::Recursive CVE-2026-110333 Plack::Request::Upload-basename never returns '', '.' or '..' CVE-2026-110332 Plack::App::URLMap matches SERVERPORT literally when stripping it from Host CVE-2026-110335 BUG FIXES...

domdig

DOMDig DOMDig es un escáner de DOM XSS que se ejecuta dentro del navegador web Chromium y puede escanear aplicaciones de página única SPA de forma recursiva. A diferencia de otros escáneres, DOMDig puede rastrear cualquier aplicación web incluyendo gmail manteniendo un registro de las...

zdns

ZDNS ZDNS es un resolvedor DNS de alta velocidad y una utilidad de línea de comandos para realizar mediciones DNS a gran escala. ZDNS está escrito en Go y contiene su propio código de resolución recursiva y una caché optimizada para realizar consultas de un conjunto diverso de nombres. Usamos...

recox

Recox v2.0 RecoX es una herramienta increíblemente versátil y potente, diseñada específicamente para ayudar en la identificación y clasificación de vulnerabilidades en aplicaciones web. El script es capaz de detectar vulnerabilidades que no suelen estar incluidas en la lista de las diez...

unblob

unblob Suite de extracción precisa, rápida y fácil de usar para blobs binarios. unblob analiza blobs binarios desconocidos para más de 78 formatos de archivo, compresión y sistema de archivos , extrae su contenido de forma recursiva y extrae fragmentos desconocidos. Es el compañero perfecto para...

crawpy

Crawpy Otra herramienta de descubrimiento de contenido escrita en Python. Qué hace diferente a esta herramienta de otras: Envía solicitudes HTTP asíncronas, rápido Modo de calibración, aplica filtros por sí mismo Modo de exploración recursiva con banderas adicionales Generación de informes, luego...

ohmybackup

ohmybackup ohmybackup - Escanea Directorios de Backup de la Víctima y Archivos de Backup ohmybackup Escanea carpetas de backup en sitios objetivo. Busca archivos archivados en las carpetas que encuentra. Con el sistema de escaneo de 2 archivos, añade extensiones y nombres de archivo de diferentes...