CVE-2026-102510

Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size Value in the Go implementation of Apache PLC4X PLC4Go allow a malicious device, or an attacker able to inject network traffic, to crash or exhaust the memory of the client...

NPM: undici vulnerable to Denial of Service via unbounded decompression of compressed responses

NPM: undici vulnerable to Denial of Service via unbounded decompression of compressed responses vulnerability discovered by ? in WordPress Npm undici versions = 7.15.0, 7.29.1...

CVE-2026-97689

urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.readchunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a...

EUVD-2026-89017

urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.readchunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a...

CVE-2026-102495

A flaw was found in Apache XMLSchema. The parser does not properly restrict how deeply schema imports and includes can be nested during processing. A remote attacker could provide a crafted schema with deeply nested references, triggering unbounded recursion that exhausts the call stack. This fla...

CVE-2026-102360

The lib0 library, versions 0.2.1-0.2.117 and 1.0.0-rc.32 and earlier, contains a missing bounds check in its binary decoder. Specifically, the readUint8Array function fails to compare the wire-supplied length against the decoder's own view. This allows an unauthenticated remote peer to perform an...

CVE-2026-102360 lib0 `readUint8Array` performs an unbounded read past the end of the decoder’s view, disclosing adjacent process memory

A missing bounds check in the binary decoder in lib0, versions 0.2.1-0.2.117 and earlier and 1.0.0-rc.32 and earlier, lets any unauthenticated remote peer read adjacent process memory and receive it back. readUint8Array never compares the wire-supplied length against the decoder's own view, so on...

libheif-cve-2026-50142

CVE-2026-50142 — libheif Asignación de heap ilimitada en el analizador de secuencias HEIF modo de tamaño fijo stsz Gravedad: Alta CVSS 7.5 Aviso: GHSA-jvmp-j3cw-84mh Corregido: commit a6caa38 por @farindk Tiempo para corregir: 1 hora Resumen Un archivo HEIF manipulado de 1.477 bytes desencadena u...

CVE-2026-102495

A flaw exists in Apache XmlSchema where the parser fails to restrict the nesting depth of schema imports and includes . A remote attacker can provide a crafted schema with deeply nested references to trigger unbounded recursion , causing a stack overflow. This results in an application crash and ...

CVE-2026-102495 Apache XMLSchema: Denial of service through unbounded recursion when resolving schema imports and includes

Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...

CVE-2026-102473

A flaw was found in dash. When built without libc fnmatch, the internal pmatch matcher implements by unbounded recursion over candidate positions. A local user who can plant filenames, or otherwise feed that matcher, can make a short multi-star pattern such as .....tar.gz consume excessive CPU...

CVE-2026-102473 Dash: dash: super-polynomial backtracking in pmatch when libc fnmatch is disabled

A flaw was found in dash. When built without libc fnmatch, the internal pmatch matcher implements by unbounded recursion over candidate positions. A local user who can plant filenames, or otherwise feed that matcher, can make a short multi-star pattern such as .....tar.gz consume excessive CPU...

EUVD-2026-88667

A flaw was found in dash. When built without libc fnmatch, the internal pmatch matcher implements by unbounded recursion over candidate positions. A local user who can plant filenames, or otherwise feed that matcher, can make a short multi-star pattern such as .....tar.gz consume excessive CPU...

CVE-2026-102473

A flaw was found in dash. When built without libc fnmatch, the internal pmatch matcher implements by unbounded recursion over candidate positions. A local user who can plant filenames, or otherwise feed that matcher, can make a short multi-star pattern such as .....tar.gz consume excessive CPU...

SUSE CVE-2026-91765

cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion exis...

d_link_880_bug

D-Link路由器中的漏洞 CVE-2017-14948 在这篇简短的文章中，我们将看到我在D-Link产品中发现的一些漏洞。D-Link提供广泛的产品，包括许多不同的路由器型号，搭载不同的固件版本。在本文中，我将涉及以下固件版本：DIR-880L、DIR-868L、DIR-890L、DIR-885L 和 DIR-895L。 闲话少说，让我们开始。 固件分析 由于我没有拥有任何D-Link路由器，并且它们提供对其固件的免费访问，我决定仅通过静态分析来发现漏洞。请注意，在本节中，我将以DIR-880L固件为例，其他固件具有类似的结构。 DIR-880L...

dir-3040_dos

dir-3040 拒绝服务 Dir-3060 也可能受影响，因为它们共享来自同一固件的许多组件。 已在最新固件 1.20b03a 热修复版上测试。 FTP 服务器用户访问页面默认配置为允许任何具有写入权限的用户直接写入 RAM，而非仅限制写入 USB 驱动器。 在此问题的固件最新版本中，没有进行越界或缓冲区溢出检查。 写入（填满）可用内存后，系统将崩溃并重启。 用户无需管理员权限即可执行攻击。 以下为带有图片的详细概念验证。 曾联系 D-Link，但他们因无法复现该问题而强烈否认存在该漏洞。其他不合逻辑的解决方案已被我拒绝。 显示新用户的默认配置 检查 syslog 中的可用内存 使用 ...

Updated php package fixes security vulnerabilities

FILTERSANITIZEENCODED does not encode 0xFF IPv6 ACL bypass in FastCGI listen.allowedclients due to partial address comparison Various packet overreads in mysqlnd wire protocol TLS hostname verification falls back to CN after SAN mismatch Heap buffer overflow in phpopensslmatcheswildcardname on...

MGASA-2026-0458 Updated php package fixes security vulnerabilities

FILTERSANITIZEENCODED does not encode 0xFF IPv6 ACL bypass in FastCGI listen.allowedclients due to partial address comparison Various packet overreads in mysqlnd wire protocol TLS hostname verification falls back to CN after SAN mismatch Heap buffer overflow in phpopensslmatcheswildcardname on...

CVE-2026-101333

A flaw in the Micrometer user-event metrics listener of Keycloak , an identity and access management solution, allows an unauthenticated attacker to create an unlimited number of metric time series. This occurs when the listener is configured to include the idp tag and an attacker sends requests ...