CVE-2026-82864 pdfme pdf-lib before 5.5.10 Denial of Service via Decompression Bomb

pdfme pdf-lib versions before 5.5.10 contain an unbounded buffer growth vulnerability in the DecodeStream.ensureBuffer method that allows attackers to cause denial of service by supplying a crafted PDF with a FlateDecode stream containing a decompression bomb. Attackers can upload a small...

CVE-2026-82864 pdfme pdf-lib before 5.5.10 Denial of Service via Decompression Bomb

pdfme pdf-lib versions before 5.5.10 contain an unbounded buffer growth vulnerability in the DecodeStream.ensureBuffer method that allows attackers to cause denial of service by supplying a crafted PDF with a FlateDecode stream containing a decompression bomb. Attackers can upload a small...

CVE-2026-82864

pdfme pdf-lib versions before 5.5.10 contain an unbounded buffer growth vulnerability in the DecodeStream.ensureBuffer() method. An attacker can supply a crafted PDF with a FlateDecode stream containing a decompression bomb, causing a small compressed file to decompress to hundreds of megabytes. ...

EUVD-2026-68399

pdfme pdf-lib versions before 5.5.10 contain an unbounded buffer growth vulnerability in the DecodeStream.ensureBuffer method that allows attackers to cause denial of service by supplying a crafted PDF with a FlateDecode stream containing a decompression bomb. Attackers can upload a small...

CVE-2024-58379 nodemailer before 6.9.9 ReDoS via attachDataUrls parameter

nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUrls parameter is set or processing embedded file attachments. Attackers can send specially crafted emails with malicious data URLs or embedded attachments to cause the event loop...

CVE-2024-58379

nodemailer before 6.9.9 contains a regular expression denial of service (ReDoS) vulnerability in email parsing, triggered when the attachDataUrls parameter is set or when processing embedded file attachments. Attackers can send specially crafted emails containing malicious data URLs or embedded a...

CVE-2024-58379

nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUrls parameter is set or processing embedded file attachments. Attackers can send specially crafted emails with malicious data URLs or embedded attachments to cause the event loop...

CVE-2026-80667

A flaw was found in the Linux kernel's Mellanox mlx5 network driver, specifically within the Multi-Port Ethernet Switch MPESW work handling for Link Aggregation Groups LAG. When the mlx5laggetdevcomcomp function returns a null value, the mlx5mpeswwork function fails to call complete. This oversig...

CVE-2026-80655

A flaw was found in the Linux kernel's zynqmppower driver. A race condition during event registration could allow a local attacker to trigger a system crash. This occurs because certain work structures are registered before they are properly allocated and initialized. If firmware triggers an even...

external_expat-2.1.0_CVE-2022-25313

このリポジトリには README がありません。...

CVE-2026-72818

A flaw was found in NLTK. The TweetTokenizer component, used for processing social media text, contains a regular expression vulnerability. A remote unauthenticated attacker can provide specially crafted input containing many alternating label separators, causing the regular expression to backtra...

CVE-2019-19945_Test

CVE-2019-19945Test 这是第一个提议的 CVE 的代码。 1. 安装 Docker 2. 构建并运行服务器 cd Server docker build -t server/cve . docker run -d --name server -p 80:80 server/cve 3. 获取服务器容器的 IP Linux sudo docker container inspect server | grep -i IPAddress Windows Powershell docker container inspect server | Select-String...

CVE-2024-23774

CVE-2024-23774 - 引用符なしWindowsサービスパスの脆弱性 情報は追って提供されます。...

Open5GS-CVE-2025-41067-CVE-2025-41068-PoC

Open5GS NRF サービス拒否 CVE-2025-41067 & CVE-2025-41068 このリポジトリには、NewPlaneのOpen5GSで発見された重大度の高い2つの脆弱性に対するProof-of-Concept PoC エクスプロイトスクリプトが含まれています。これらの脆弱性は、攻撃者によってトリガーされることで、NRF Network Repository Function コンポーネントにサービス拒否 DoS を引き起こす可能性があります。 脆弱性の詳細 CVEs: CVE-2025-41067, CVE-2025-41068 影響を受けるソフトウェア:...

CVE-2026-80629

A flaw was found in the Linux kernel's octeontx2-af: npc component. This vulnerability arises from incorrect memory allocation when processing reserved MCAM entries for the CPT 2nd pass, leading to a small out-of-bounds write. An attacker could potentially exploit this memory corruption to cause ...

CVE-2026-80618

A flaw was found in the kernel's AMD GPU driver drm/amdkfd. This vulnerability occurs when the driver attempts to unpin a memory buffer object BO twice during memory deallocation. A local attacker could exploit this double-unpin operation, leading to a memory management error. This issue can caus...

CVE-2021-27188

CVE-2021-27188 建议描述 由“Sovremennye Delovye Tekhnologii”开发的 FX Aggregator 终端客户端允许攻击者通过对受害者的账户进行五次无效登录尝试，导致拒绝服务（访问暂停五小时）。 漏洞类型 其他 DoS 产品供应商 OOO Sovremennye Delovye Tekhnologii 受影响产品代码库 Fx-agreggator 终端客户端 - 1 受影响组件 受影响的可执行文件 攻击类型 远程 影响 拒绝服务 true 攻击向量 要利用此漏洞，攻击者需要使用无效凭据尝试以其他用户身份登录 5 次。合法用户将被封禁 5 小时。...

CVE-2020-13935

Apache Tomcat の WebSocket 脆弱性に対するエクスプロイト CVE-2020-13935 対応する ブログ記事 では、この脆弱性の分析と悪用について詳しく説明されています。 使用方法 リポジトリをクローンしてから、tcdos バイナリをビルドします。次のようにプログラムを実行して、特定の WebSocket エンドポイントが脆弱かどうかをテストします: root@kitploit: $ git clone https://github.com/RedTeamPentesting/CVE-2020-13935 $ cd CVE-2020-13935 $ go buil...

Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-

CVE-2026-6666 – XPCサービスNSKeyedUnarchiver逆シリアル化攻撃（macOS/iOSシミュレーション） プログラムコード（Pythonシミュレーション） root@kitploit: !/usr/bin/env python3 vulnerablexpcservice.py - Simulated XPC service using unsafe plist deserialization import plistlib, subprocess, socketserver, struct Mach message simulation: we just...