CVE-2026-13592 liftoff-sr CIPster EtherNet IP Message append out-of-bounds write

A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d3504b783ccdb6287f3e4. Affected by this issue is the function BufWriter::append of the component EtherNet IP Message Handler. Performing a manipulation results in out-of-bounds write. Remote exploitation of the attack is...

GHSA-8HF9-3Q64-Q2QF Dalfox Server Mode has an Unauthenticated Arbitrary File Create/Append via `output` Option

Summary When dalfox is run in REST API server mode, the output, output-all, and debug fields in model.Options are JSON-tagged and deserialized directly from the attacker's request body, then propagated unchanged through dalfox.Initialize into the scan engine's logging path. The logger opens the...

EUVD-1999-0215

Malware in sbrugna...

Mozilla Firefox/Firefox ESR/Thunderbird ArrayBufferBuilder::append Function Information Disclosure Vulnerability

Mozilla Firefox/Thunderbird is a web browser/email client released by Mozilla. An information disclosure vulnerability exists in the Mozilla Firefox/Firefox ESR/Thunderbird ArrayBufferBuilder::append function, which can be exploited by a remote attacker to access arbitrary memory locations...