CVE-2026-107325 Application denial of service via missing BSON array length validation in MongoDB Go Driver

Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an...

CVE-2026-107325

The MongoDB Go Driver is vulnerable to a denial of service due to improper validation of BSON array lengths. When an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array, it can trigger an out-of-bounds index and a runtime panic . An unauthenticated a...

Application denial of service via missing BSON array length validation in MongoDB Go Driver

Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an...

codeql-sample-polkit

-- coding: utf-8 - - Le bug pkexec de polkit Vue d'ensemble Ce dépôt examine le bug pkexec de polkit en utilisant CodeQL. Il contient des instructions pour construire les bases de données les bases de données résultantes une séquence de requêtes illustrant une approche pour trouver ce bug Ce qui...

cve-2018-7600-drupalgeddon2-lab

مختبر ثغرة CVE-2018-7600 Drupalgeddon2 مختبر تعليمي يوضح استغلال ثغرة CVE-2018-7600 Drupalgeddon2 باستخدام بيئة دروبال 7.56 ضعيفة تم إعدادها باستخدام Docker. يحاكي هذا المشروع سير عمل تقييم الثغرات الواقعي، بما في ذلك: إعداد البيئة الضعيفة الاكتشاف الماسح الضوئي الاستغلال RCE تحليل الحمولة التوثي...

CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE

هدف Ivanti EPMM RCE قبل المصادقة التجريبي تطبيق تجريبي بسيط يوضح كيفية إعادة إنتاج ثغرة Ivanti EPMM RCE قبل المصادقة CVE-2026-1281 / CVE-2026-1340 لأغراض تعليمية وبحوث أمنية. نظرة عامة على الثغرة تستغل هذه الثغرة سلوك التوسع الحسابي في Bash. عندما يُستخدم متغير يحتوي على مرجع لمتغير آخر في سياق...

AZL-106860 CVE-2026-107298 affecting package msgpack 3.3.0-1

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...

CVE-2026-107298

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...

CVE-2026-107298

The msgpack5 library, an implementation for node.js and the browser , is vulnerable to a Denial of Service (DoS) condition prior to version 6.1.0 . The root cause is a lack of nesting-depth limits in the array and map decoding paths. An attacker providing malicious MessagePack input can submit de...

CVE-2026-107298

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...

EUVD-2026-95109

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...

EUVD-2026-94534

Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow...

CVE-2018-7600

CVE-2018-7600 - Drupal 7 रिमोट कोड निष्पादन CVE-2018-7600 शोषण का एक Rust कार्यान्वयन जो कमजोर Drupal 7 इंस्टॉलेशन = 7.57 को लक्षित करता है। यह CLI निम्नलिखित PoC प्रवाह को पुन: उत्पन्न करता है: यह user/password पथ के माध्यम से कैश किए गए रेंडरेबल फॉर्म को दूषित करता है, एक formbuildid निकालता है...

CVE-2024-1874

CVE-2024-1874 CVE-2024-1874 के लिए प्रूफ ऑफ कॉन्सेप्ट कमांड इंजेक्शन Array-ish $command Parameter of procopen के माध्यम से CVE-2024-1874 फिक्स को बायपास करना CVE: PHP संस्करण 8.1. 8.1.29 से पहले, 8.2. 8.2.20 से पहले, 8.3. 8.3.8 से पहले, CVE-2024-1874 का फिक्स तब काम नहीं करता जब कमांड नाम में...

CVE-2020-11019

CVE-2020-11019 في FreeRDP الإصدار 2.0.0 أو أقل، عند التشغيل مع ضبط المسجل على "WLOGTRACE"، قد يحدث تعطل محتمل للتطبيق بسبب قراءة مؤشر مصفوفة غير صالح. قد تتم طباعة البيانات كسلسلة نصية إلى الطرفية المحلية. تم إصلاح هذا في الإصدار 2.1.0. authentication| complexity| vector ---|---|--- SINGLE| LOW|...

CVE-2020-0674

CVE-2020-0674 CVE-2020-0674 एक use-after-free कमजोरी है जो legacy jscript engine में पाई जाती है। इसे Internet Explorer में ट्रिगर किया जा सकता है। यहाँ दिया गया exploit maxpl0it द्वारा लिखा गया है, लेकिन यह कमजोरी स्वयं Qihoo 360 द्वारा खोजी गई थी जो वास्तविक दुनिया में उपयोग में थी। यह exploit...

CVE-2025-30144

सारांश fast-jwt लाइब्रेरी RFC https://datatracker.ietf.org/doc/html/rfc7519page-9 के अनुसार iss क्लेम को सही ढंग से मान्य नहीं करती है। विवरण fast-jwt लाइब्रेरी में iss जारीकर्ता क्लेम सत्यापन स्ट्रिंग्स की एक सरणी को एक वैध iss मान के रूप में अनुमति देता है। यह डिज़ाइन दोष एक संभावित हमले को सक्...

glibc: Fix out-of-bounds array write in tdelete

A flaw was found in glibc. An out-of-bounds array write vulnerability exists within the tdelete function. This issue occurs due to incorrect management of array sizes, which can lead to memory corruption. A local attacker with low privileges could potentially exploit this to cause a denial of...

CVE-2026-107313 pgjdbc stores bytes of earlier messages in place of a large value on GSS-encrypted connections

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and 42.7.5 can send the previous contents of the GSS send buffer in place of the first part of a value on a connection with GSS encryption gssEncMode=prefer or require, and the server stores the value without an error. The buffer is 16320 bytes...

EUVD-2026-94546

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and 42.7.5 can send the previous contents of the GSS send buffer in place of the first part of a value on a connection with GSS encryption gssEncMode=prefer or require, and the server stores the value without an error. The buffer is 16320 bytes...