568715 matches found
CVE-2026-68767
A flaw was found in hashcat. The fgetl function in src/filehandling.c incorrectly writes a null terminator one byte beyond the allocated buffer when processing an input line that exactly matches the buffer's length. A local attacker can exploit this out-of-bounds heap write by providing a special...
CVE-2026-68520
A flaw was found in Glances, an open-source system monitoring tool. A remote unauthenticated attacker could exploit a vulnerability in the asdictsecure function, which incorrectly handles option names. This flaw leads to the exposure of sensitive information, including usernames and credentials...
CVE-2026-73194
A flaw was found in DBI for Perl. An unvalidated numeric placeholder in the preparse function can lead to a heap out-of-bounds write. When processing an untrusted statement, a specially crafted numeric placeholder can cause the binder counter to become negative. This results in subsequent...
CVE-2026-73193
A flaw was found in DBI. On 32-bit Perl systems, a vulnerability exists in the preparse function due to an integer wraparound when calculating the output buffer size. A remote attacker can exploit this by providing a specially crafted, excessively large statement. This can lead to a heap...
CVE-2026-78376 Webkitgtk: use-after-free of jscvalue function parameters
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption...
CVE-2026-78376 Webkitgtk: use-after-free of jscvalue function parameters
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption...
CVE-2026-62982
A flaw was found in Glances, an open-source system monitoring tool. The sanitizemustachedict function in glances/actions.py did not properly sanitize nested list and dictionary strings, specifically process command-line values. This allowed pipe characters to bypass the sanitization process and b...
CVE-2026-63409
A flaw was found in Deskflow, a keyboard and mouse sharing application. A malicious Deskflow server can send a specially crafted data packet containing an odd-length DSOP Deskflow Server Options Protocol vector to a connected client. This triggers an out-of-bounds read vulnerability in the client...
Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext
A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman ECDH ciphertext to the gcrypkdecrypt function. This can lead to a heap-based buffer overflow, potentially causing a denial of service DoS condition...
python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory
A flaw was found in the tarfile.extractall function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside th...
CVE-2026-78378
Ransomlook is affected by a Redis glob pattern injection vulnerability. The root cause is insufficient neutralization of user-controlled input before it is incorporated into Redis SCAN MATCH patterns. The /api/health/ endpoint falls back to using the attacker-supplied value directly in a Redis ke...
CVE-2026-78378 Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data
Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SCAN MATCH patterns. The /api/health/ endpoint attempted to resolve the supplied name to a known group or market, but when resolutio...
CVE-2026-78378 Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data
Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SCAN MATCH patterns. The /api/health/ endpoint attempted to resolve the supplied name to a known group or market, but when resolutio...
CVE-2026-78378 Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data
Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SCAN MATCH patterns. The /api/health/ endpoint attempted to resolve the supplied name to a known group or market, but when resolutio...
EUVD-2026-64856
Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SCAN MATCH patterns. The /api/health/ endpoint attempted to resolve the supplied name to a known group or market, but when resolutio...
CVE-2026-78250 bytebot-ai bytebot Agent Execution Workflow infinite loop
A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infinite loop. The attack may be performed from remote. The exploit is publicly available and might be used. This...
CVE-2026-78250 bytebot-ai bytebot Agent Execution Workflow infinite loop
A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infinite loop. The attack may be performed from remote. The exploit is publicly available and might be used. This...
EUVD-2026-64854
A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infinite loop. The attack may be performed from remote. The exploit is publicly available and might be used. This...
CVE-2026-78250
bytebot-ai bytebot 0.0.1 is affected by a vulnerability in the Agent Execution Workflow component where manipulation of an unknown function leads to an infinite loop , resulting in a denial of service (availability impact only). The attack can be performed remotely and requires low privileges (CV...
github.com/getkin/kin-openapi: kin-openapi: kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default
A flaw was found in kin-openapi. This vulnerability allows a remote attacker to bypass authentication checks. Specifically, the system incorrectly handles missing authentication configurations, substituting them with a function that does not verify user credentials. This enables unauthorized acce...