EUVD-2026-107216

Enforceable assertion in the streaming feature of Apache bRPC version 0 and unconditionally asserts CHECKbuf.IsEmpty on the frame payload. A feedback frame that carries an unexpected payload, or a feedback frame received on a stream where flow control is disabled curbufsize == 0, reaches these...

CVE-2026-78334

Apache bRPC versions

CVE-2026-78334 Apache bRPC: Missing Authentication for Streaming RPC Frames

Missing authentication in the streaming RPC path of Apache bRPC version 1.18.0 on all platforms allows a remote attacker to bypass server authentication and inject or deliver streaming frames, when a server is configured with an Authenticator. Root Cause: When authentication is configured,...

CVE-2026-74755

Apache bRPC (versions prior to 1.18.0 ) is vulnerable to a Denial of Service due to an integer underflow in the mcpack2pb component. The UnparsedValue::as_string() function in src/mcpack2pb/parser.cpp fails to validate the value_size of string fields from network data; when the size is 0, the cal...

CVE-2026-74755 Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Service

An integer underflow in the mcpack2pb component of Apache bRPC version 1.18.0 on all platforms allows remote attackers to crash a bRPC server by sending a request containing a string field with a zero valuesize. The UnparsedValue::asstring function computes size - 1 without validating size; when...

CVE-2026-48830 Apache bRPC: HTTP builtin request can mark a connection authenticated and bypass auth for later requests

Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to bypass authentication for protected non-builtin HTTP endpoints by first sending a builtin HTTP request on the same HTTP/1.1 keep-alive connection. When ServerOptions.auth is enabled and builtin HTTP...

CVE-2026-48830

Apache bRPC versions through 1.17.0 are vulnerable to an improper authentication flaw (CWE-287 ). If ServerOptions.auth is enabled and builtin HTTP services are exposed, an unauthenticated remote attacker can send a builtin HTTP request as the first message on an HTTP/1.1 keep-alive connection. T...

MicroC-u-os2-vuln-code-extracted-from-

MicroC-u-os2-vuln-code-extracted-from- Buffer Overflow Attack and Prevention for an FPGA Based Soft-Processor System - 7th International Conference on Innovation in Electronics and Communication EngineeringICIECE'18...

pcybox-attackgraph

PCYBOX AttackGraph Build. Attack. Defend. Understand. An open source lab that runs entirely in your browser: build a simulated infrastructure, watch an attack move through it , and check whether your defense really works. Every step comes with the reason it worked, and every control says exactly...

ONe-TIME-ecb-oracle-attack-AES

ONe-TIME-ecb-oracle-attack-AES...

CVE-2018-7600.

IGLOO Corp, Won Chi Hyun Drupal RCE Analysis Report Drupal RCE CVE-2018-7600 Dont Forget to Put Your Adress into the Script ! Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack...

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat CVE-2025-59287 is a critical RCE vulnerability in Windows Server Update Services WSUS caused by unsafe deserialization of untrusted data. It allows remote attackers to execute arbitrary code without authentication. Urgent...

CVE-2020-0114-systemui

In progress LINKS https://vulners.com/cve/CVE-2020-0114 https://source.android.com/security/bulletin/2020-06-01 Special Attack Surface in Android Part 3 — The Hidden call Function...

MqttAttack

This repository does not have a README...

DEBIAN-CVE-2026-113129

Improper access control in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-113193

Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-113122

Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-113128

Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-113196

Improper access control in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-113066

Memory corruption in Fonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...