CVE-2026-0049

CVE-2026-0049 — Android DNG zero-click DoS dngsdk MapTable add-overflow Full research material and PoC. Narrative analysis: 🇮🇹BLOG.md · 🇬🇧BLOG.en.md. Bug : unsigned integer overflow on fAreaSpec.Plane + fAreaSpec.Planes in dngopcodeMapTable::ProcessArea dngsdk/source/dngmiscopcodes.cpp:388. Impact...

php-oom-longjmp

php2shell - php-oom-longjmp Someone on the internet can talk to your PHP site the same way a browser does, with no password. On last-affected PHP they can send a crafted file-upload request that makes the engine run out of memory while it is still reading the request, before your application...

jfrog-CVE-2023-25136-OpenSSH_Double-Free

CVE-2023-25136 Proof-of-Concept Overview This is a DoS Proof-of-Concept of OpenSSH 9.1p1 Double-Free Vulnerability CVE-2023-25136. It will trigger the double-free and cause an abort crash. For a comprehensive understanding, check out the accompanying blog post for in-depth details. Dependencies...

CVE-2023-33242

CVE-2023-33242 CVE-2023-33242 PoC The simulated Lindell17 protocol is vulnerable to a bit extraction exploit, allowing an attacker to recover the private key by iteratively extracting individual bits of the key. The protocol is designed to generate ECDSA signatures in a client-server model, with...

CVE-2026-66754-Remote-Denial-of-Service-via-Reachable-Assertion-in-URL-Prefix-Handling-rouille-

Security Advisory: Remote Denial of Service via Reachable Assertion in URL Prefix Handling rouille Assigned CVE ID: CVE-2026-66754 Summary Request::removeprefix tests the percent-decoded URL but asserts on the raw one. A request whose decoded path starts with the prefix while its raw path does no...

CVE-2024-27804

CVE-2024-27804 ./build.sh ./panic.sh paniccpu 4 caller 0xfffffe0026851cdc: Unaligned kernel data abort. at pc 0xfffffe0026aed514, lr 0xfffffe0026aed5d8 saved state: 0xfffffe3a396e3200 x0: 0x000000000000000e x1: 0xfffffe1002bdc01b x2: 0x0000000000000000 x3: 0xfffffe3a396e3444 x4: 0xfffffe3a396e344...

node-cve-2026-58042-check

node-cve-2026-58042-check Offline evidence checker for CVE-2026-58042 — Node.js: DNS resolveAny process abort. It compares Node.js versions that you report against the fixed releases named in the vendor advisory and writes a CSV, JSON or HTML report. Python 3.10+, standard library only; the singl...

CVE-2026-124762

P-Net before 1.0.4 finds the RPC session of a received PDU by its activity UUID only, and a reject, fault or cancel PDU for the session aborts the Application Relationship, without checking that the PDU is the answer to a call of the device or where it comes from. A host with ADJACENT network...

EUVD-2026-125301

P-Net before 1.0.4 finds the RPC session of a received PDU by its activity UUID only, and a reject, fault or cancel PDU for the session aborts the Application Relationship, without checking that the PDU is the answer to a call of the device or where it comes from. A host with ADJACENT network...

CVE-2026-124762

P-Net versions prior to 1.0.4 are vulnerable to an Origin Validation Error (CWE-346). The software identifies RPC sessions using only the activity UUID, failing to verify if a received reject, fault, or cancel PDU is a legitimate response or its true source. An attacker with ADJACENT network acce...

EUVD-2026-125296

P-Net before 1.0.4 routes a received RTA alarm frame to an Application Relationship using only the destination alarm reference in the frame, without checking the source of the frame. A host with ADJACENT network access can abort an established Application Relationship with a single alarm ERROR...

CVE-2026-124759

P-Net versions before 1.0.4 are vulnerable to an Origin Validation Error (CWE-346) where the system routes received RTA alarm frames to an Application Relationship based solely on the destination alarm reference. Because the software fails to verify the source address of the frame, an attacker wi...

PT-2026-146839

P-Net before 1.0.4 routes a received RTA alarm frame to an Application Relationship using only the destination alarm reference in the frame, without checking the source of the frame. A host with ADJACENT network access can abort an established Application Relationship with a single alarm ERROR...

CVE-2026-123863

A reachable assertion in Node.js HTTP/2 session teardown lets any unauthenticated client abort the server, over both TLS and cleartext. A client can arrange for an Http2Stream that still holds nghttp2-allocated header buffers to outlive its session: the stream is removed from the session's stream...

CVE-2023-25136

OpenSSH CVE-2023-25136 Pre-Auth Double Free – Writeup and POC What is OpenSSH? OpenSSH is a popular tool used for secure communication and remote access. It was developed as a free, open-source implementation of the Secure Shell SSH communications protocol and is widely used for various...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-152911)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-152911 advisory. FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rtsreadresult function within the RPC gateway transport parser. Attackers can send a malicious...

Linux Distros Unpatched Vulnerability : CVE-2026-125187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains a reachable assertion vulnerability in the TTA encoder's ttaencodeframe in libavcodec/ttaenc.c, which never reserves output packet...

Linux Distros Unpatched Vulnerability : CVE-2026-125246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains a denial of service vulnerability in cbsjpegassemblefragment that miscounts 0xff stuffing bytes in JPEG scan headers. Attackers ca...

Node.js < 22.23.5, < 24.22.3, < 26.13.1 - NULL Pointer Dereference in StreamPipe Teardown When a respondWithFile() Download Is Cancelled leading to Remote Process Abort

NULL Pointer Dereference in StreamPipe Teardown When a respondWithFile Download Is Cancelled leading to Remote Process Abort vulnerability discovered by ? in WordPress npm Node.js versions 26.13.1...

Linux Distros Unpatched Vulnerability : CVE-2026-125237

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in libavcodec/dpx.c that leaves dpx-hwaccelpictureprivate allocated when Vulkan hwaccel...