CVE-2026-101037

A vulnerability was found in FAST FAC1200R 5.0202011191.0.2. Affected is the function parseadvertisementframe of the component devdiscover Service. The manipulation results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The...

CVE-2026-101037 FAST FAC1200R devdiscover Service parse_advertisement_frame stack-based overflow

A vulnerability was found in FAST FAC1200R 5.0202011191.0.2. Affected is the function parseadvertisementframe of the component devdiscover Service. The manipulation results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The...

CVE-2026-101037

A stack-based buffer overflow vulnerability exists in the devdiscover Service of FAST FAC1200R 5.0_20201119_1.0.2 . The flaw is located in the parse_advertisement_frame function and can be triggered remotely. Public exploits for this vulnerability are available. The vendor has not provided a resp...

EUVD-2026-88202

A vulnerability was found in FAST FAC1200R 5.0202011191.0.2. Affected is the function parseadvertisementframe of the component devdiscover Service. The manipulation results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The...

CVE-2023-40297

CVE-2023-40297 Stakater Forecastle v1.0.144 では、Webサイトコンポーネントにおけるディレクトリトラバーサルが可能です 脆弱性タイプ ディレクトリトラバーサル 製品ベンダー Stakater 影響を受ける製品コードベース Forecastle = v1.0.144 影響を受けるコンポーネント 影響を受けるコンポーネント: URL - https://www.example.com/%5C../etc/passwd 攻撃タイプ Local 影響: 権限昇格 true 影響: 情報漏洩 true 攻撃ベクトル 攻撃ベクトル:...

EUVD-2026-88201

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7171: parameter 'Apellido 1' in the endpoint '/administrator/index.php?page=admin.useradd&userid=45&option=comvirtuemart'. Successful exploitation of this vulnerability could allow an...

CVE-2026-94287

A flaw was found in libXpm. An unsigned integer underflow vulnerability exists in the library's write path when processing image data. A local attacker could exploit this issue by convincing a user or application to process a specially crafted file, causing unbounded CPU and memory consumption th...

CVE-2026-101036

A path traversal vulnerability exists in FLB-Music FLB-Music-Player versions 1.1.8, 1.1.9, 1.2.0, and 1.2.1 . The flaw originates from the path.join function within the file /src/main/core/createParsedTrack.ts . This vulnerability requires local access to exploit. While the exploit has been discl...

EUVD-2026-88198

A vulnerability has been found in FLB-Music FLB-Music-Player 1.1.8/1.1.9/1.2.0/1.2.1. This impacts the function path.join of the file /src/main/core/createParsedTrack.ts. The manipulation leads to path traversal. The attack must be carried out locally. The exploit has been disclosed to the public...

CVE-2026-101036 FLB-Music FLB-Music-Player createParsedTrack.ts path.join path traversal

A vulnerability has been found in FLB-Music FLB-Music-Player 1.1.8/1.1.9/1.2.0/1.2.1. This impacts the function path.join of the file /src/main/core/createParsedTrack.ts. The manipulation leads to path traversal. The attack must be carried out locally. The exploit has been disclosed to the public...

CVE-2026-101036 FLB-Music FLB-Music-Player createParsedTrack.ts path.join path traversal

A vulnerability has been found in FLB-Music FLB-Music-Player 1.1.8/1.1.9/1.2.0/1.2.1. This impacts the function path.join of the file /src/main/core/createParsedTrack.ts. The manipulation leads to path traversal. The attack must be carried out locally. The exploit has been disclosed to the public...

EUVD-2026-88204

A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component nr-gnb. Executing a manipulation can lead to uncaught exception. The attack can be launched remotely. The exploit has been published and ma...

CVE-2026-101035 aligungr UERANSIM nr-gnb encode.cpp DecodePlainMmMessage uncaught exception

A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component nr-gnb. Executing a manipulation can lead to uncaught exception. The attack can be launched remotely. The exploit has been published and ma...

CVE-2026-101035 aligungr UERANSIM nr-gnb encode.cpp DecodePlainMmMessage uncaught exception

A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component nr-gnb. Executing a manipulation can lead to uncaught exception. The attack can be launched remotely. The exploit has been published and ma...

CVE-2026-101035 aligungr UERANSIM nr-gnb encode.cpp DecodePlainMmMessage uncaught exception

A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component nr-gnb. Executing a manipulation can lead to uncaught exception. The attack can be launched remotely. The exploit has been published and ma...

CVE-2026-101035

A flaw in aligungr UERANSIM (up to version 3.3.0) allows a remote attacker to trigger an uncaught exception . The vulnerability exists in the DecodePlainMmMessage function within the src/lib/nas/encode.cpp file of the nr-gnb component. An exploit has been published and may be used in the wild. Re...

scan-shai-hulud

scan-shai-hulud CVE-2026-45321「Mini Shai-Hulud」 サプライチェーン攻撃の影響を受けているかどうかを検出する、高速で依存関係ゼロのBashスキャナです。 2026年5月11日、TanStack、Mistral AI、UiPath、OpenSearch、Guardrails AIにわたる 170以上のnpmパッケージ と 2つのPyPIパッケージ...

CVE-2026-94287

A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion...

DEBIAN-CVE-2026-94287

A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion...

CVE-2026-101015

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is some unknown functionality of the file policy.c of the component Domain Handler. Executing a manipulation can lead to improper validation of unsafe equivalence in input. The attack may be launched...