Lucene search
+L

4386 matches found

CVE
CVE
•added 2026/10/06 10:57 a.m.•26 views

CVE-2026-75818

The GNU Aspell prezip-bin utility contains a heap-based buffer overflow vulnerability within the decompressor located in prog/prezip.c. The root cause is an insufficient check of buffer space, allowing a crafted compressed file to trigger out-of-bounds read and write operations on the heap. An at...

1.8CVSS6.2AI score0.00138EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/06 10:57 a.m.•44 views

CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

1.8CVSS0.00138EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/06 10:57 a.m.•9 views

CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

1.8CVSS6.2AI score0.00138EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/06 10:57 a.m.•11 views

EUVD-2026-93364

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

1.8CVSS6.2AI score0.00138EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/06 2:17 a.m.•14 views

CVE-2026-105484

A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652B20230116. The impacted element is the function firmwarecheck of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument filename leads to os command injection. The attack...

10CVSS0.02128EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/06 1:00 a.m.•14 views

EUVD-2026-92908

A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652B20230116. The impacted element is the function firmwarecheck of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument filename leads to os command injection. The attack...

10CVSS7.8AI score0.02128EPSS
SaveExploits0References5
Fedora
Fedora
•added 2026/10/06 12:20 a.m.•8 views

[SECURITY] Fedora 45 Update: ocaml-ppx-bin-prot-0.17.1-2.fc45

This package supports generating binary serialization and deserialization functions from type definitions. For more information, see: - https://github.com/janestreet/binprot/blob/master/README.md for the bin-prot format - https://github.com/janestreet/binprot/blob/master/shape/README.md for...

7.9CVSS7.3AI score0.00323EPSS
SaveExploits0
Fedora
Fedora
•added 2026/10/06 12:20 a.m.•6 views

[SECURITY] Fedora 45 Update: ocaml-bin-prot-0.17.0-14.fc45

This library contains functionality for reading and writing OCaml values in a type-safe binary protocol. These functions are extremely efficient and provide users with a convenient and safe way of performing I/O on any extensionally defined data type. This means that functions, objects, and value...

7.9CVSS7.3AI score0.00323EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•15 views

PT-2026-106300

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R version 9.4.0cu.652 B20230116 Description An OS command injection flaw exists in the UploadFirmwareFile Handler component. A remote, unauthenticated attacker can exploit this by manipulating the file name parameter within the...

10CVSS8.4AI score0.02128EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•12 views

PT-2026-106759

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.31.1 Description A flaw in the Penalty Handler component allows remote attackers to cause a denial of service. The issue resides in the get token bin counts and mask function within the vllm/model...

5.3CVSS5.3AI score0.00311EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-75818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer...

1.8CVSS6.1AI score0.00138EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•13 views

PT-2026-106709

Name of the Vulnerable Software and Affected Versions GNU Aspell versions prior to 0.60.8.3 Description The prezip-bin utility contains a heap-based buffer overflow in the decompressor located in prog/prezip.c. The decompressor fails to properly validate buffer space, allowing a specially crafted...

1.8CVSS6.3AI score0.00138EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•5 views

CVE-2026-75818: Heap-based Buffer Overflow

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

1.8CVSS6.2AI score0.00138EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•13 views

Astra Linux – Vulnerability in TeXeVe-bin

It was discovered that texlive-bin commit c515e contains a heap buffer overflow vulnerability through the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service DoS by providing a malicious TTF file...

8.1CVSS8.2AI score0.00895EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/05 9:17 a.m.•17 views

CVE-2026-105284

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

10CVSS0.00784EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/05 9:00 a.m.•32 views

CVE-2026-105284

The Totolink A3002MU (version 1.0.0-B20230403.1455) is vulnerable to improper authorization due to a weakness in the sub_40FCFC function of the /bin/boa file within the Authentication Check component. An attacker can launch a remote manipulation to bypass authorization controls. Public exploit co...

10CVSS7.7AI score0.00784EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/05 9:00 a.m.•11 views

CVE-2026-105284 Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

10CVSS7.7AI score0.00784EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/05 9:00 a.m.•13 views

EUVD-2026-92331

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

10CVSS7.7AI score0.00784EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•10 views

CVE-2026-105284: Improper Authorization

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

10CVSS7.7AI score0.00784EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/10/04 5:41 p.m.•29 views

metasploitable2-privilege-escalation

Task 05 — Privilege Escalation Zyroo Cybersecurity Internsh...

7.2CVSS7.6AI score0.80416EPSS
SaveExploits14
Rows per page
Query Builder