CVE-2026-124536

JSON::XS versions before 4.05 for Perl allow memory exhaustion by buffering incremental input past maxsize after a NUL byte in incrparse. The parser appends each chunk to its buffer and compares maxsize with how far it has progressed, not with the buffer length. It treats a NUL byte as the end of...

CVE-2026-124536 JSON::XS versions before 4.05 for Perl allow memory exhaustion by buffering incremental input past max_size after a NUL byte in incr_parse

JSON::XS versions before 4.05 for Perl allow memory exhaustion by buffering incremental input past maxsize after a NUL byte in incrparse. The parser appends each chunk to its buffer and compares maxsize with how far it has progressed, not with the buffer length. It treats a NUL byte as the end of...

CVE-2026-124536

The JSON::XS module for Perl (versions before 4.05 ) is vulnerable to memory exhaustion due to an issue in the incr_parse function. The parser incorrectly compares the max_size limit against the progress made rather than the actual buffer length. Because the parser treats a NUL byte as the end of...

wotop

Web-On-Top-Of-Protocol WOTOP ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ Introduction WOTOP is a tool meant to...

W3 Total Cache <= 2.9.3 - Unauthenticated Dynamic Security Token Disclosure

The W3 Total Cache WordPress plugin through version 2.9.3 skips its entire output buffering and processing pipeline whenever an incoming request's User-Agent header contains the string "W3 Total Cache", without authenticating the caller. On sites that use developer-placed dynamic fragment tags, t...

gitea-artifact-v4-readall

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · gitea-artifact-v4-readall Write-up: https://abraxaslabs.tech/research/gitea-artifact-v4-readall gitea-artifact-v4-readall Gitea 1.27.3 - Gitea jobsummary.go already caps at MaxJobSummarySize 1 MiB with io.LimitReader...

EUVD-2026-123605

proxygen's QPACK decoder enforced its size limit on a string literal in an encoder-stream instruction only after the entire literal had been received. A remote, unauthenticated HTTP/3 peer could send an insert instruction on the QPACK encoder stream that declares an arbitrarily large literal and...

CVE-2026-119235: Facebook proxygen: proxygen's QPACK decoder enforced its size limit on a string literal in an encoder-stream instruction only after the…

proxygen's QPACK decoder enforced its size limit on a string literal in an encoder-stream instruction only after the entire literal had been received. A remote, unauthenticated HTTP/3 peer could send an insert instruction on the QPACK encoder stream that declares an arbitrarily large literal and...

CVE-2026-113772

Time-of-check time-of-use toctou race condition in Windows Redirected Drive Buffering allows an authorized attacker to disclose information locally...

CVE-2026-108412

Heap-based buffer overflow in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally...

EUVD-2026-122056

Heap-based buffer overflow in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally...

CVE-2026-108412

A heap-based buffer overflow exists in Windows Redirected Drive Buffering , which could allow an authorized attacker to achieve local privilege elevation . While the documents confirm the vulnerability exists and provide a high severity score of 7.8 , they do not provide specific technical detail...

EUVD-2026-121937

Time-of-check time-of-use toctou race condition in Windows Redirected Drive Buffering allows an authorized attacker to disclose information locally...

CVE-2026-113772

A Time-of-check time-of-use (TOCTOU) race condition vulnerability exists in Windows Redirected Drive Buffering . This flaw allows an authorized attacker to perform a local information disclosure . Exploitation details, including specific attack vectors or proof-of-concept code, are not provided i...

Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally...

Windows Redirected Drive Buffering Information Disclosure Vulnerability

Time-of-check time-of-use toctou race condition in Windows Redirected Drive Buffering allows an authorized attacker to disclose information locally...

PT-2026-143603

Time-of-check time-of-use toctou race condition in Windows Redirected Drive Buffering allows an authorized attacker to disclose information locally...

tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS

Summary The HTTP server mode of @tsparticles/mcp-server accumulates all incoming request body chunks into an in-memory Buffer array with no size limit before calling JSON.parse. An unauthenticated remote attacker can stream an arbitrarily large body to POST /mcp, exhausting the Node.js process...

GHSA-447X-QQWF-M7XQ tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS

Summary The HTTP server mode of @tsparticles/mcp-server accumulates all incoming request body chunks into an in-memory Buffer array with no size limit before calling JSON.parse. An unauthenticated remote attacker can stream an arbitrarily large body to POST /mcp, exhausting the Node.js process...

CVE-2026-63655 tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS

tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-server accepts unauthenticated POST /mcp requests in integrations/mcp-server/src/index.ts and accumulates every request-body chunk in a Buffer without a...