CVE-2026-51416

1. Resumen Tipo de vulnerabilidad : Denegación de servicio / Lectura no restringida de respuestas HTTP CWE-400 Ubicación marcada : backend/internal/handler/authwechatoauth.go:1149 Descripción de la vulnerabilidad : El proceso de intercambio de tokens OAuth de WeChat utiliza io.ReadAllresp.Body...

EUVD-2026-86046

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...

CVE-2026-97433

The Linux kernel contains a vulnerability in the nvme driver related to the handling of FDP configuration descriptors. A lack of size validation while walking the FDP configurations log could allow a descriptor with dsze == 0 or a descriptor located past the log end to cause unbounded iteration o...

CVE-2026-97433 nvme: validate FDP configuration descriptor sizes

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...

CVE-2026-97433 nvme: validate FDP configuration descriptor sizes

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...

CVE-2026-22013-Hardware-Wallet-USB-Descriptor-Buffer-Overflow

CVE-2026-22013 – Desbordamiento de búfer del descriptor USB en billetera de hardware Código del programa simulación de firmware en C // hwwalletusb.c - USB descriptor parsing with fixed buffer include void handleusbsetupchar data, int len char descriptor32; if len 0 && data0 == 0x06 //...

netbsd_hfs

Desbordamiento local de hfs en NetBSD Detalles del bug: sizet hfslibreadanodeoffsetsvoid inbytes, uint16t outoffsetarray void ptr; if inbytes == NULL || outoffsetarray == NULL return 0; ptr = inbytes; / The offset for record 0 which is the very last offset in the node is always equal to 14, the...

CVE-2026-65650

CVE-2026-65650 — PoC: DoS autenticado en la subida de avatares de Elgg Denegación de servicio autenticada en la función de subida de avatares de Elgg mediante dimensiones de imagen sin límites, lo que provoca el agotamiento de la memoria de GD. Afectado: Elgg saveIconFromUploadedFile'avatar' retu...

CVE-2026-97058 sprintf-js through 1.1.3 Denial of Service via Unbounded Precision

sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations wi...

CVE-2026-66080

A flaw was found in RabbitMQ. A highly privileged remote attacker, with the rabbitmqstreammanagement plugin enabled and access to the target vhost, can exploit an unbounded allocation vulnerability in the super-stream partitions. This allows the attacker to allocate a large amount of memory,...

ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...

Linux Distros Unpatched Vulnerability : CVE-2026-67235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-header BodySize a uint64 was stored witho...

CVE-2026-97433: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...

CVE-2026-97433

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...

UBUNTU-CVE-2026-59980

hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blocking further processing with large enough unsanitized input. A fix is available in python-hyper/hpa...

Linux Distros Unpatched Vulnerability : CVE-2026-97433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log e...

UBUNTU-CVE-2026-97433

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...

CVE-2026-97058

sprintf-js through 1.1.3 passes unbounded precision specifiers to toFi...

UBUNTU-CVE-2026-97058

sprintf-js through 1.1.3 passes unbounded precision specifiers to toFi...

CVE-2026-59980

hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blocking further processing with large enough unsanitized input. A fix is available in python-hyper/hpa...