280 matches found
DEBIAN-CVE-2026-57185
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer over-read in the PJSIP MWI body parser by sending a carefully...
CVE-2026-57185
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer over-read in the PJSIP MWI body parser by sending a carefully...
CVE-2026-57185 Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer over-read in the PJSIP MWI body parser by sending a carefully...
CVE-2026-57185
Asterisk, an open-source telephony toolkit, is vulnerable to a buffer over-read in the PJSIP MWI body parser . An authenticated attacker can crash the service by sending a specially crafted SIP NOTIFY request. To exploit this, the attacker must first pass SIP authentication via username/password ...
CVE-2026-57185 Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer over-read in the PJSIP MWI body parser by sending a carefully...
EUVD-2026-111103
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer over-read in the PJSIP MWI body parser by sending a carefully...
CLSA-2026-1793099858 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.6-tuxcare.1...
CLSA-2026-1793098724 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.3-tuxcare.3...
CLSA-2026-1793098695 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.5-tuxcare.3...
CLSA-2026-1793098476 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.4-tuxcare.2...
CLSA-2026-1793097203 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.8.4-tuxcare.4...
PT-2026-126692
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer over-read in the PJSIP MWI body parser by sending a carefully...
Exploit for CVE-2026-111497
node2shell-detector Host-side detections for Node2Shell CV...
SUSE CVE-2026-111181
body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a...
EUVD-2026-108189
body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body...
body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body
Impact A single request can crash any application using body-parser with default options. When a request carries a Content-Encoding for example gzip, body-parser pipes it into a decompression stream and, after reading the body, leaves that stream piped with no error listener. A payload of one val...
01-numacert (>=1.0.0, <=3.0.0), 10by10-react-app (1.2.1) +19017 more potentially affected by CVE-2026-111181 via body-parser (>=1.0.0, <=1.20.8)
body-parser NPM version =1.0.0, =1.0.0, =0.2.0, =1.0.2, =2.0.0, =0.2.0, =0.0.978, =0.2.0, =0.0.1, =0.2.0 and more Source cves: CVE-2026-111181 Source advisory: GHSA-27R3-JXMH-P828...
@activepieces/piece-ai (>=0.3.1, <=0.3.4), @ada-mcp/mcp-server (>=0.1.0, <=0.1.1) +274 more potentially affected by CVE-2026-111181 via body-parser (>=2.0.2, <=2.3.0)
body-parser NPM version =2.0.2, =0.3.1, =0.1.0, =10.0.0-rc.2, =3.0.0-beta.0, =4.0.0-rc.1, =1.0.0-beta.0, =8.0.3, =0.3.17, =1.0.0, =2.0.32, =1.4.0, =1.1.1, =1.0.15, =1.0.15, =1.0.18-beta.1 and more Source cves: CVE-2026-111181 Source advisory: GHSA-27R3-JXMH-P828...
npm: body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body
npm: body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body vulnerability discovered by ? in WordPress npm body-parser versions 1.20.9...
PT-2026-122410
Impact A single request can crash any application using body-parser with default options. When a request carries a Content-Encoding for example gzip, body-parser pipes it into a decompression stream and, after reading the body, leaves that stream piped with no error listener. A payload of one val...