14686 matches found
CVE-2023-38545-sample
Quick description This showcases the cURL CVE-2023-38545. It is as lightweight as I could make it. Setup First, build the Docker Image: docker build . -t cveimage Next, we can simply run the image file, creating a temporary Docker Container which will get deleted once the container is stopped:...
CLEANSTART-2024-VV95778 Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used
Security vulnerability affects the firefox-esr package. Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used...
sudo-1.8.3p1-patched
sudo-1.8.3p1-patched This is a custom version of sudo, based on the sudo 1.8.3p1 package as provided by Canonical for Ubuntu 12.04 using the URLs below, with the CVE-2021-3156 patches applied. http://us.archive.ubuntu.com/ubuntu/pool/main/s/sudo/sudo1.8.3p1-1ubuntu3.7.dsc...
CVE-2022-43343
Description for CVE-2022-43343 N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c Reproduction To reproduce the vulnerability, download a vulnerable version of N-Prolog v1.91 and compile the project: git clone...
context-segmentation
Context Segmentation for SLM Agents This is the implementation of the solution proposed in the scientific paper: Evaluating Context Segmentation in Locally Deployable SLMs for Cybersecurity CTF Tasks Setup Ensure you have Python 3.12.3+ installed along with Docker engine Python environment python...
Security Bulletin: IBM CloudPak for Data Scheduling Service is vulnerable to CVE-2024-36620, CVE-2025-54410, CVE-2026-92542, CVE-2026-92543.
Summary Multiple vulnerabilities in the Docker/Moby dependency affect IBM Cloud Pak for Data Scheduling Service. The fixes are included in Scheduling Service 1.61.10 for IBM Cloud Pak for Data 5.3.1 and Scheduling Service 2.0.6 for IBM Cloud Pak for Data 5.4.0. Vulnerability Details...
CVE-2026-54610 LibreDWG: const-input mutation and crash in bit_TV_to_utf8 error handling
LibreDWG is a free C library to read and write DWG files. Prior to 0.14, bitTVtoutf8 in src/bits.c can write to the caller-provided src buffer despite accepting const input. On an iconv error other than E2BIG, the function frees its output buffer and passes the original input alias to bituexpand,...
CVE-2026-7005
WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during controller onboarding, causing the victim's browser to issue discovery requests to attacker-specified hosts at paths such as...
CVE-2026-7005 WIT SynApps Runtime 1.4.11 Browser-Mediated SSRF via Controller Onboarding
WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during controller onboarding, causing the victim's browser to issue discovery requests to attacker-specified hosts at paths such as...
EUVD-2026-114362
WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during controller onboarding, causing the victim's browser to issue discovery requests to attacker-specified hosts at paths such as...
EUVD-2026-114330
mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, OPEN TYPE decoding can dereference an unallocated member pointer and crash the consuming program. OPENTYPEaperget in OPENTYPEaper.c, OPENTYPEberget in OPENTYPEber.c, OPENTYPEoerget in OPENTYPEoer.c, and OPENTYPEuperget in OPENTYPEuper.c share...
CVE-2025-55891
CVE-2025-55891: Heap Corruption in TIFFCP.EXE docuPrinter Pro via Malformed TIFF File Summary A heap corruption vulnerability exists in TIFFCP.EXE, a command-line utility bundled with Neevia docuPrinter Pro, due to the use of an outdated and vulnerable version of libtiff v3.5.7. By supplying a...
PT-2026-133787
Name of the Vulnerable Software and Affected Versions mouse07410/asn1c versions prior to 1.2.5 Description An issue exists in the decoding of OPEN TYPE where the program may dereference an unallocated member pointer, leading to a segmentation fault and causing the consuming program to crash. This...
PT-2026-134133
WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during controller onboarding, causing the victim's browser to issue discovery requests to attacker-specified hosts at paths such as...
CVE-2026-7005: WIT SynApps Runtime: WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows…
WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during controller onboarding, causing the victim's browser to issue discovery requests to attacker-specified hosts at paths such as...
CVE-2024-26335
swftools v0.9.2 was discovered to contain a segmentation violation via the function statefree at swftools/src/swfc-history.c...
CVE-2024-26333
swftools v0.9.2 was discovered to contain a segmentation violation via the function freelines at swftools/lib/modules/swfshape.c...
CVE-2024-26337
swftools v0.9.2 was discovered to contain a segmentation violation via the function sfont at swftools/src/swfc.c...