CVE-2026-106447

The @stablelib/cbor decoder in StableLib (prior to version 2.0.4 ) is vulnerable to a stack exhaustion denial of service . The root cause is that the _decodeValue() function recursively processes nested CBOR arrays, maps, and tags without enforcing a maximum nesting depth. An attacker providing a...

CVE-2021-42697

Akka HTTP 10.1.x 版本（早于 10.1.15）和 10.2.x 版本（早于 10.2.7）在解析 HTTP 头时可能遇到栈耗尽问题，从而允许远程攻击者通过发送带有深层嵌套注释的 User-Agent 头来实施拒绝服务攻击。 参考 MITRE Akka 博客 注释的任意嵌套 Akka 基本设置指南 PoC 说明 测试版本：10.2.4 目标服务器指纹：akka-http/ 负载片段：User-Agent:...

katana

Katana Un exploit de BootROM para dispositivos Qualcomm lanzados entre 2016 y 2019. Explicación breve del Exploit Con el SoC MSM8998 Nazgul, se agregó el comando 0x13 SAHARARESETSTATEMACHINEID. El comando llamaba a bootsaharaentry, que se supone que reinicia Sahara. La falla es que cada llamada a...

CVE-2026-40345

deepmerge-ts 8.0.0: DoS recursivo por grafo de objetos Reproduje un fallo de agotamiento de pila en las versiones de deepmerge-ts anteriores a 8.0.0. La parte interesante es que el bloqueo no necesita un objeto anidado enorme. Proviene de la identidad del objeto. Si ambos valores que se fusionan ...

CVE-2025-46206

Existe una vulnerabilidad de denegación de servicio en MuPDF 1.25.6 y versiones anteriores. Cuando un atacante ejecuta el comando "mutool clean poc /dev/null", el programa cae en una recursión infinita entre las funciones stripoutlines y stripoutline en pdf-clean-file.c hasta que se agota la pila...

openSUSE 16 Security Update : rustup (openSUSE-SU-2026:22016-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22016-1 advisory. - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243862. - CVE-2025-58160:...

Damn_Vulnerable_C_Program

Nota: el nombre del archivo se ha cambiado de imgRead.c a dvcp.c; si estás viendo videos, verás imgRead.c, pero en el repositorio de GitHub verás dvcp.c. Usa el nombre de archivo correcto. Damn Vulnerable C ProgramDVCP Mi canal de YouTube:...

Linux Distros Unpatched Vulnerability : CVE-2026-66858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough ca...

OPENSUSE-SU-2026:22016-1 Security update for rustup

This update for rustup fixes the following issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243862. - CVE-2025-58160: tracing-subscriber: Tracing log pollution bsc1249008. - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve...

CVE-2026-83663

A flaw was found in Apache Thrift. A remote attacker can cause a Denial of Service DoS by sending specially crafted network frames with zero payload bytes to an affected Go service. When processing these empty frames, the transport recursively calls its read function rather than iterating in a...

CVE-2026-66858

A flaw was found in Apache Thrift. Multiple language bindings fail to enforce recursion limits when processing skipped fields in incoming messages. A remote, unauthenticated attacker can exploit this vulnerability by sending a message containing deeply nested unknown fields, leading to stack...

AZL-105950 CVE-2026-66858 affecting package thrift 0.24.0-1

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...

DEBIAN-CVE-2026-66858

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...

CVE-2026-66858

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...

CVE-2026-66858 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml)

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...

EUVD-2026-91585

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...

CVE-2026-66858

Apache Thrift versions before 0.25.0 are vulnerable to a Denial of Service (DoS) attack due to a flaw in the protocol skip routine. Specifically, multiple language bindings fail to enforce recursion limits when processing skipped fields in incoming messages. A remote, unauthenticated attacker can...

CVE-2026-66858 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml)

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...

CVE-2026-94650 Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion)

Uncontrolled Recursion vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94650 Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion)

Uncontrolled Recursion vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...