ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud `getFileURL` Endpoint Leads to Remote Denial of Service

Summary The AoE3 POST /game/cloud/getFileURL handler in luskaner/ageLANServer's bundled game server decodes an attacker-controlled names JSON array and immediately allocates response storage sized directly from the array's length makei.A, lenreq.Names.Data, with no request body size limit and no...

CVE-2026-107839

ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age of Mythology games. Prior to version 1.15.2, the AoE3 POST /game/cloud/getFileURL handler in the bundled game server has no request body size limit or cap on the...

CVE-2026-107839

The ageLANServer software, which provides a cross-platform web server and launcher for Age of Empires and Age of Mythology games, is vulnerable to a Remote Denial of Service (DoS) . In versions prior to 1.15.2 , the AoE3 POST /game/cloud/getFileURL handler lacks a request body size limit and fail...

CVE-2026-107839 ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud `getFileURL` Endpoint Leads to Remote Denial of Service

ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age of Mythology games. Prior to version 1.15.2, the AoE3 POST /game/cloud/getFileURL handler in the bundled game server has no request body size limit or cap on the...

CVE-2018-7600-Remote-Code-Execution

Exploit Python de Drupalgeddon2 CVE-2018-7600 Ce dépôt contient un exploit de type preuve de concept basé sur Python pour la faille critique d'exécution de code à distance dans Drupal, connue sous le nom de Drupalgeddon2 CVE-2018-7600. Ce script est conçu à des fins éducatives et pour être utilis...

ByteCaster

ByteCaster Швейцарский нож для шифрования полезной нагрузки, обфускации и преобразования в байтовые массивы — всё одной командой! Поддерживает 3 алгоритма шифрования, 4 алгоритма кодирования / обфускации и 14 форматов вывода. Установка Скачайте скомпилированный бинарный файл или скомпилируйте...

CVE-2020-15999

CVE-2020-15999 Vous trouverez ici toutes les ressources nécessaires pour exécuter le PoC pour la CVE-2020-15999 dans Google Chrome et Ftview Ubuntu. Ce dépôt contient deux dossiers, un pour chaque programme. Google Chrome Pour reproduire l'exploit, vous devrez installer une version de Google Chro...

CVE-2026-98203

A flaw was found in the Linux kernel's SoC System on Chip button array driver. The driver fails to verify that the button descriptor package contains entries before accessing them during device initialization. This issue may allow an invalid device configuration to trigger an out-of-bounds memory...

CVE-2026-98376

The Linux kernel contains a vulnerability in the eBPF subsystem where percpu_array_map_ops.map_meta_equal incorrectly points to bpf_map_meta_equal(). Because the latter fails to compare max_entries, a percpu array used as an inner map can be replaced with a smaller one, bypassing size checks. Thi...

EUVD-2026-95531

In the Linux kernel, the following vulnerability has been resolved: bpf: Use arraymapmetaequal for percpu array inner map replacement percpuarraymapops.mapmetaequal points to the generic bpfmapmetaequal, which does not compare maxentries. When a percpu array serves as an inner map, replacing it...

meltdown-exploit

MELTDOWN EXPLOIT POC Speculative optimizations execute code in a non-secure manner leaving data traces in microarchitecture such as cache. Lipp et. al 2018 published their code 2018-01-09 at https://github.com/IAIK/meltdown. Look at their paper for details: https://meltdownattack.com/meltdown.pdf...

CVE-2021-32537

CVE-2021-32537 : Accès hors limites dans RTKVHD64 menant à la corruption du pool. Ceci est un bogue que j'ai signalé à Realtek début avril 2021. Le pilote affecté s'appelle RTKVHD64.sys et semble disponible sur un grand nombre de matériels courants testé sur les configurations matérielles...

CVE-2026-107723

The fast-jwt library (versions prior to 6.3.0 ) is vulnerable to a silent claim-validator bypass when a JWT payload is a JSON array . The root cause is located in src/decoder.js, where the system verifies that the payload is an object but fails to reject arrays. Because the claim validator loop l...

CVE-2026-107723 fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array

fast-jwt provides fast JSON Web Token JWT implementation. Prior to 6.3.0, fast-jwt createVerifier accepts a validly signed JWT whose payload is a JSON array because src/decoder.js checks that the payload is an object but does not reject arrays. The claim validator loop then finds no named exp, nb...

EUVD-2026-95348

fast-jwt provides fast JSON Web Token JWT implementation. Prior to 6.3.0, fast-jwt createVerifier accepts a validly signed JWT whose payload is a JSON array because src/decoder.js checks that the payload is an object but does not reject arrays. The claim validator loop then finds no named exp, nb...

CVE-2021-21315-PoC

CVE-2021-21315-systeminformation Ceci est une preuve de concept pour CVE-2021-21315 qui affecte la bibliothèque System Information pour Node.JS paquet npm "systeminformation". npmjs.com/systeminformation "veillez à vérifier ou à nettoyer les paramètres de service qui sont passés à si.inetLatency,...

Moderate: Red Hat Security Advisory: glibc security, bug fix, and enhancement update

An update for glibc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

glibc: Fix out-of-bounds array write in tdelete

A flaw was found in glibc. An out-of-bounds array write vulnerability exists within the tdelete function. This issue occurs due to incorrect management of array sizes, which can lead to memory corruption. A local attacker with low privileges could potentially exploit this to cause a denial of...

Exploit for Improper Input Validation in Drupal

Drupalgeddon 2 CVE-2018-7600 Vulhub's...

EUVD-2026-95170

Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an...