EUVD-2026-88393

A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the file legacy/convert.ts of the component Middleware. The manipulation leads to uncaught exception. Remote exploitation of the attack is possible. Upgrading to version 2026-09-...

CVE-2026-101101

A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the file legacy/convert.ts of the component Middleware. The manipulation leads to uncaught exception. Remote exploitation of the attack is possible. Upgrading to version 2026-09-...

CVE-2026-101101

The ag-ui-protocol ag-ui software (versions up to 2026-09-07 ) contains a vulnerability in the Middleware component. Specifically, the JSON.parse function within the legacy/convert.ts file can be manipulated to trigger an uncaught exception . This issue is susceptible to remote exploitation . To ...

CVE-2026-101035

A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component nr-gnb. Executing a manipulation can lead to uncaught exception. The attack can be launched remotely. The exploit has been published and ma...

EUVD-2026-88204

A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component nr-gnb. Executing a manipulation can lead to uncaught exception. The attack can be launched remotely. The exploit has been published and ma...

CVE-2026-101035 aligungr UERANSIM nr-gnb encode.cpp DecodePlainMmMessage uncaught exception

A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component nr-gnb. Executing a manipulation can lead to uncaught exception. The attack can be launched remotely. The exploit has been published and ma...

CVE-2026-101035

A flaw in aligungr UERANSIM (up to version 3.3.0) allows a remote attacker to trigger an uncaught exception . The vulnerability exists in the DecodePlainMmMessage function within the src/lib/nas/encode.cpp file of the nr-gnb component. An exploit has been published and may be used in the wild. Re...

CVE-2024-38355-PoC

CVE-2024-38355 Demo Caída de Socket.IO Este proyecto es una prueba de concepto que demuestra CVE-2024-38355 , una vulnerabilidad de denegación de servicio en socket.io. El proyecto fue creado con fines educativos para mostrar el mecanismo de ataque y cómo proteger las aplicaciones. Acerca de la...

multiparty-CVE-2026-8161

CVE-2026-8161 Proof of concept of CVE-2026-8161 Multiparty Description [email protected] and earlier are vulnerable to denial of service through an uncaught exception. The parser stores uploaded fields and files in plain JavaScript objects and does not safely distinguish parser owned keys fr...

CVE-2026-95842

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, SessionEventLoop.run catches only InterruptedException, and SessionEventLoopGroup does not restart a terminated loop. An MQTT command that raises an uncaught exception can terminate an event loop shared by multiple client sessions,...

CVE-2026-95842

The Moquette Java MQTT broker is vulnerable to a Denial of Service (DoS) condition in versions prior to 0.18.1 . The root cause is that SessionEventLoop.run only catches InterruptedException, and SessionEventLoopGroup fails to restart a terminated loop. Consequently, an MQTT command triggering an...

CVE-2026-95842 Moquette uncaught MQTT command exceptions can terminate shared session event loops

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, SessionEventLoop.run catches only InterruptedException, and SessionEventLoopGroup does not restart a terminated loop. An MQTT command that raises an uncaught exception can terminate an event loop shared by multiple client sessions,...

CVE-2026-95842: Uncaught Exception

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, SessionEventLoop.run catches only InterruptedException, and SessionEventLoopGroup does not restart a terminated loop. An MQTT command that raises an uncaught exception can terminate an event loop shared by multiple client sessions,...

CVE-2026-62985

request-filtering-agent is an https.Agent implementation that blocks requests to Private/Reserved IP addresses. Prior to 3.2.1, RequestFilteringHttpAgent and RequestFilteringHttpsAgent synchronously threw from createConnection when rejecting a literal private-IP host such as 169.254.169.254 or...

EUVD-2026-84679

request-filtering-agent is an https.Agent implementation that blocks requests to Private/Reserved IP addresses. Prior to 3.2.1, RequestFilteringHttpAgent and RequestFilteringHttpsAgent synchronously threw from createConnection when rejecting a literal private-IP host such as 169.254.169.254 or...

CVE-2026-62985 request-filtering-agent: Synchronous throw from createConnection() for literal private-IP hosts bypasses req.on('error'), crashing the Node.js process

request-filtering-agent is an https.Agent implementation that blocks requests to Private/Reserved IP addresses. Prior to 3.2.1, RequestFilteringHttpAgent and RequestFilteringHttpsAgent synchronously threw from createConnection when rejecting a literal private-IP host such as 169.254.169.254 or...

CVE-2026-62985

The request-filtering-agent library (an http(s).Agent implementation) is vulnerable to a denial of service before version 3.2.1 . The RequestFilteringHttpAgent and RequestFilteringHttpsAgent components synchronously throw from createConnection() when rejecting literal private-IP hosts (e.g., 127....

CVE-2026-62985 request-filtering-agent: Synchronous throw from createConnection() for literal private-IP hosts bypasses req.on('error'), crashing the Node.js process

request-filtering-agent is an https.Agent implementation that blocks requests to Private/Reserved IP addresses. Prior to 3.2.1, RequestFilteringHttpAgent and RequestFilteringHttpsAgent synchronously threw from createConnection when rejecting a literal private-IP host such as 169.254.169.254 or...

CVE-2026-66749-Unchecked-Room-Lookup-Leads-to-Server-Crash-Let-s-Chat-

Security Advisory: Unchecked Room Lookup Leads to Server Crash Let's Chat Assigned CVE ID: CVE-2026-66749 Summary One HTTP request from any logged-in account shuts down the Let's Chat server process. GET /messages takes a room parameter, looks that room up by id, and then calls a method on the...

CVE-2026-62985: Uncaught Exception

request-filtering-agent is an https.Agent implementation that blocks requests to Private/Reserved IP addresses. Prior to 3.2.1, RequestFilteringHttpAgent and RequestFilteringHttpsAgent synchronously threw from createConnection when rejecting a literal private-IP host such as 169.254.169.254 or...