EUVD-2026-98917

Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks...

DEBIAN-CVE-2026-111156

libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in initsoundfont in src/sndfont.c that allows attackers to corrupt memory by supplying unvalidated SF2 preset header bank and preset values. Attackers can craft a .sf2 file whose bank or preset indexes past the 128-entry...

CVE-2026-111156

The libTiMidity library, in versions through 0.2.8 , is vulnerable to an out-of-bounds access flaw within the init_soundfont() function in src/sndfont.c. The root cause is the processing of unvalidated SF2 preset header bank and preset values . By providing a maliciously crafted .sf2 file with ba...

CVE-2026-111156 libTiMidity through 0.2.8 Out-of-Bounds Access via SoundFont Preset Header

libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in initsoundfont in src/sndfont.c that allows attackers to corrupt memory by supplying unvalidated SF2 preset header bank and preset values. Attackers can craft a .sf2 file whose bank or preset indexes past the 128-entry...

CVE-2026-111156 libTiMidity through 0.2.8 Out-of-Bounds Access via SoundFont Preset Header

libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in initsoundfont in src/sndfont.c that allows attackers to corrupt memory by supplying unvalidated SF2 preset header bank and preset values. Attackers can craft a .sf2 file whose bank or preset indexes past the 128-entry...

CVE-2026-111156

libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in initsoundfont in src/sndfont.c that allows attackers to corrupt memory by supplying unvalidated SF2 preset header bank and preset values. Attackers can craft a .sf2 file whose bank or preset indexes past the 128-entry...

CVE-2026-111148 libsidplayfp through 3.1.1 Heap Out-of-Bounds Read via SidTuneBase::acceptSidTune

libsidplayfp through 3.1.1 contains a heap out-of-bounds read vulnerability that allows attackers to crash applications by supplying a PSID/RSID file with an unchecked data offset. Attackers can set the header data offset beyond the file size, wrapping the length calculation so resolveAddrs reads...

CVE-2026-111144

The libansilove library, specifically versions 1.3.0 through 1.4.2 , is vulnerable to a NULL pointer dereference within the ansilove_xbin() function. An attacker can cause an application to crash by providing a crafted XBIN file that sets the 512-character flag without the corresponding custom-fo...

CVE-2026-111142

The Zziplib library, versions through 0.13.80 , is susceptible to an out-of-bounds read vulnerability in the zzip/mmapped.c component. An attacker can provide a crafted ZIP central directory where the end-of-central-directory record is manipulated to place the first entry near the buffer end. Thi...

CVE-2025-56799

CVE-2025-56799 OS Command Injection Vulnerability via Cache Clearing Scheduler in Reolink Desktop Application 1. Overview Name : Reolink Desktop Application Version : 8.18.12 Vendor : Reolink CWE : CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step (CVE-2026-101294)

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step vulnerability. Vulnerability Details CVEID:CVE-2026-101294 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Applicatio...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data (CVE-2026-105442)

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data vulnerability. Vulnerability Details CVEID:CVE-2026-105442 DESCRIPTION: IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Libert...

CVE-2026-100349

A flaw was found in kin-openapi. This vulnerability allows an attacker to cause a Denial of Service DoS by triggering an application crash during response validation. When an OpenAPI specification declares a response header using content rather than a schema, the validation logic attempts to...

log4shellwithlog4j2_13_3

log4shellwithlog4j2133 Springboot web application accepts a name get parameter and logs its value to log4j2. Vulnerable to CVE-2021-44228. build the Springboot vulnerable application with mvn clean install run the Springboot application with the k2 agent with java --add-modules java.sql...

log4j-scanner

log4j-scanner A Log4j vulnerability scanner is automated scanner to find log4j CVE-2021-44228 and CVE202145046 vulnerabilities in web applications. Features 1- It supports multiple URL to perform scan 2- It has payload that can bypass some WAF 3- It supports GET and POST request 4- It supports us...

log4j2-web-vulnerable

log4j2-web-vulnerable A simple vulnerable web app for log4j2 RCECVE-2021-44228 exploit test. Start Run java -jar target/gs-handling-form-submission-0.1.0.jar. Access http://127.0.0.1/greeting If you want to compile yourself, use jdk version 8u20...

CVE-2026-6355

Augmentt: Cross-Tenant Access via IDOR Credits This CVE was a collaborative effort between: Raznov – GitHub: https://github.com/basraznov HelloWorld Author– GitHub: https://github.com/Penquinsecq Description A vulnerability in the web application allows unauthorized users to access and manipulate...

CVE-2021-45416

Docker RosarioSIS Installation Minimum requirements: Docker & Git working. You can pull the image from DockerHub or: 1. docker on $ git clone https://github.com/dnr6419/CVE-2021-45416.git $ cd CVE-2021-45416 $ docker-compose up -d 2. Visit the URL and Install the Database...

Security Bulletin: Multiple vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository

Summary WebSphere Application Server is shipped as a component of WebSphere Service Registry and Repository. Information about multiple vulnerabilities affecting WebSphere Application Server have been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in...

StalkPhish

StalkPhish project has been renamed StalkPhish-OSS You can find the new project page here: https://github.com/t4d/StalkPhish-OSS Online StalkPhish SaaS You can found our online StalkPhish SaaS application on https://www.Stalkphish.io and use the REST API available for free. Join us You can join u...