949 matches found
CVE-2026-27887 Spin has memory leaks in various WIT interfaces
Spin is an open source developer tool for building and running serverless applications powered by WebAssembly. When Spin is configured to allow connections to a database or web server which could return responses of unbounded size e.g. tables with many rows or large content bodies, Spin may in so...
CVE-2026-27887 Spin has memory leaks in various WIT interfaces
Spin is an open source developer tool for building and running serverless applications powered by WebAssembly. When Spin is configured to allow connections to a database or web server which could return responses of unbounded size e.g. tables with many rows or large content bodies, Spin may in so...
CVE-2026-27887
Spin is an open source developer tool for building and running serverless applications powered by WebAssembly. When Spin is configured to allow connections to a database or web server which could return responses of unbounded size e.g. tables with many rows or large content bodies, Spin may in so...
ROS-20260224-73-0002
A vulnerability in the TLS 1.3 protocol implementation of NGINX Plus and NGINX Open Source web servers is related to a flaw in the authentication procedure. Exploitation of the vulnerability may allow an intruder acting remotely to gain unauthorized access to protected information...
Yokogawa FAST/TOOLS 安全漏洞
Yokogawa FAST/TOOLS is a real-time operation management and visualization software developed by Yokogawa Electric Corporation. There are security vulnerabilities in the Yokogawa FAST/TOOLS R9.01 version up to R10.04. These vulnerabilities stem from the use of weak encryption algorithms, which may...
CVE-1999-0279
Excite for Web Servers EWS allows remote command execution via shell metacharacters...
CVE-1999-0286
In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages...
RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers
Cybersecurity researchers have disclosed details of a persistent nine-month-long campaign that has targeted Internet of Things IoT devices and web applications to enroll them into a botnet known as RondoDox. As of December 2025, the activity has been observed leveraging the recently disclosed...
The vulnerability of Zyxel 4G LTE/5G NR CPE and DSL/Ethernet CPE network devices’ web servers allows a hacker to cause service interruptions.
The vulnerability of Zyxel 4G LTE/5G NR CPE and DSL/Ethernet CPE network devices, which run on microprogramming software, is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
The vulnerability in the Rack::Multipart::Parser class of the module interface between web servers and Rack web applications allows a attacker to cause a service failure.
The vulnerability of the Rack::Multipart::Parser class in module interfaces between web servers and Rack web applications involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...
[SECURITY] Fedora 41 Update: rubygem-rack-2.2.21-1.fc41
Rack provides a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between the so-called middleware into a single...
The vulnerability of the Rack::Multipart::Parser class in the module interface between web servers and Rack web applications allows a attacker to cause a service failure.
The vulnerability of the Rack::Multipart::Parser class in module interfaces between web servers and Rack web applications involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...
WhatWeb Scanner 0.6.3
WhatWeb is a next-generation web scanner. WhatWeb recognizes web technologies including content management systems CMS, blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1800 plugins, each to recognize something different...
GHSA-FHW8-8V9P-7JP7 BBOT's various issues in unarchive.py can cause arbitrary file write and RCE
Summary Various issues in bbot's unarchive.py allow a malicious site to cause bbot to write arbitrary files to arbitrary locations. This can be used to achieve Remote Code Execution RCE. Impact A user who uses bbot to scan a malicious webserver may have arbitrary code executed on their system...
EUVD-2017-1349
Malware in sbrugna...
EUVD-2019-1943
Malware in sbrugna...
EUVD-2018-19542
Malware in sbrugna...
EUVD-1999-0173
Malware in sbrugna...