25459 matches found
CVE-2019-11287
CVE-2019-11287: DoS via Heap Overflow in RabbitMQ Web Management Plugin Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is...
DEBIAN-CVE-2026-119196
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copies the complete bit value accumulated from earlier fragments. Attacker-controlled BER or CER input contains many constructed BIT STRING fragments; schema-driven DER also accepts...
CVE-2026-119191
Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used asn1.fromDer, BIT STRING decoding, maxDepth to process the relevant input or security decision. node-forge decoded ASN.1 stored inside BIT STRING...
CVE-2026-119195
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY decoding repeatedly concatenates each fragment onto a growing bytes value. Attacker-controlled BER or CER data can use many constructed OCTET STRING or character-string fragments. DER reject...
CVE-2026-119196
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copies the complete bit value accumulated from earlier fragments. Attacker-controlled BER or CER input contains many constructed BIT STRING fragments; schema-driven DER also accepts...
CVE-2026-119196 pyasn1: Quadratic CPU consumption in constructed BIT STRING decoding
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copies the complete bit value accumulated from earlier fragments. Attacker-controlled BER or CER input contains many constructed BIT STRING fragments; schema-driven DER also accepts...
CVE-2026-119196
The pyasn1 Python library (prior to version 0.6.5 ) is vulnerable to a quadratic CPU consumption issue during constructed BIT STRING decoding . The BitStringPayloadDecoder repeatedly calls BitString.fromOctetString, shifting and copying an ever-growing SizedInteger for each fragment in BER , CER ...
CVE-2026-119196
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copies the complete bit value accumulated from earlier fragments. Attacker-controlled BER or CER input contains many constructed BIT STRING fragments; schema-driven DER also accepts...
CVE-2026-119196 pyasn1: Quadratic CPU consumption in constructed BIT STRING decoding
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copies the complete bit value accumulated from earlier fragments. Attacker-controlled BER or CER input contains many constructed BIT STRING fragments; schema-driven DER also accepts...
CVE-2026-119195 pyasn1: Quadratic-time denial of service in constructed string and indefinite-length ANY decoding
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY decoding repeatedly concatenates each fragment onto a growing bytes value. Attacker-controlled BER or CER data can use many constructed OCTET STRING or character-string fragments. DER reject...
CVE-2026-119195 pyasn1: Quadratic-time denial of service in constructed string and indefinite-length ANY decoding
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY decoding repeatedly concatenates each fragment onto a growing bytes value. Attacker-controlled BER or CER data can use many constructed OCTET STRING or character-string fragments. DER reject...
CVE-2026-32223-USBPrint-Exploit
CVE-2026-32223: Plug me If you can : Exploiting USB Printer Drivers in Windows Heap-based buffer overflow in Windows USB Print Driver usbprint.sys leading to Local Privilege Escalation LPE This vulnerability was discovered and reported by ENKI WhiteHat. Overview CVE-2026-32223 is a heap-based...
CVE-2026-119191 Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer
Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used asn1.fromDer, BIT STRING decoding, maxDepth to process the relevant input or security decision. node-forge decoded ASN.1 stored inside BIT STRING...
CVE-2026-119191
The Forge (or node-forge ) JavaScript TLS implementation is vulnerable to resource exhaustion in versions prior to 1.4.1 . The root cause is located in the asn1.fromDer() function, where the software fails to consistently apply the maxDepth limit when decoding ASN.1 stored inside BIT STRING value...
GoBfuscator
🛡️ GoBfuscator - Advanced Go Code Obfuscation Tool 🔍 Overview GoBfuscator is a professional-grade obfuscation tool specifically designed for Go Golang source code. It provides multiple layers of protection to make reverse engineering difficult while maintaining 100% runtime functionality. Key...
CVE-2026-118772 joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service
joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 and 18.3.1, the Joi.string.email multiple: true rule uses a separator regular expression whose leading whitespace quantifier is retried at every position in a long whitespace run that contains no...
CVE-2026-118772 joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service
joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 and 18.3.1, the Joi.string.email multiple: true rule uses a separator regular expression whose leading whitespace quantifier is retried at every position in a long whitespace run that contains no...
CVE-2026-118772
The joi data validator for JavaScript is vulnerable to a quadratic work issue in the Joi.string().email({ multiple: true }) rule. Specifically, a separator regular expression's leading whitespace quantifier is retried at every position during long whitespace runs without a separator, causing sign...
cve-2026-25994_PJSIP
CVE-2026-25994 – PJNATH ICE Stack Buffer Overflow pjsip ≤ 2.16 Overview CVE-2026-25994 is a stack-based buffer overflow vulnerability affecting the ICE Interactive Connectivity Establishment implementation in pjsip ≤ 2.16, specifically within the PJNATH component. The vulnerability exists in the...