Lucene search
+L

704 matches found

Kitploit
Kitploit
•added 2026/11/13 11:00 a.m.•44 views

reversemap

reversemap Analyse SQL injection attempts in web server logs The program can either be run in batch mode or interactive mode. In batch mode the program will accept Apache web server logs and will deobfuscate requested URLs from the logs. In interactive mode the program will prompt for user input...

6AI score
SaveExploits0
NVD
NVD
•added 2026/11/10 7:21 p.m.•4 views

CVE-2026-54436

Heap-based Buffer Overflow in the io-char library's DCMDCHRWAITINFO devctl handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or a crash in the Character I/O device driver...

7.4CVSS0.00112EPSS
SaveExploits0References1
NVD
NVD
•added 2026/11/10 7:21 p.m.•4 views

CVE-2026-54437

Improper Input Validation in the io-char library's DCMDCHRTCINJECTC devctl handler could allow an attacker with local access to cause data tampering in the memory input buffer of the Character I/O device driver...

6.2CVSS0.00152EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/10 6:42 p.m.•5 views

EUVD-2026-122791

Heap-based Buffer Overflow in the io-char library's DCMDCHRWAITINFO devctl handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or a crash in the Character I/O device driver...

7.4CVSS6AI score0.00112EPSS
SaveExploits0References1
CVE
CVE
•added 2026/11/10 6:42 p.m.•7 views

CVE-2026-54436

A Heap-based Buffer Overflow exists in the io-char library 's DCMD_CHR_WAITINFO devctl() handler within the QNX Software Development Platform . This vulnerability could allow a local attacker to cause data tampering, a system crash, or achieve arbitrary code execution in the Character I/O device ...

7.4CVSS6AI score0.00112EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/10 6:39 p.m.•22 views

CVE-2026-54437 Vulnerabilities in the QNX io-char library Impacts QNX Software Development Platform

Improper Input Validation in the io-char library's DCMDCHRTCINJECTC devctl handler could allow an attacker with local access to cause data tampering in the memory input buffer of the Character I/O device driver...

6.2CVSS0.00152EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/10 6:39 p.m.•5 views

EUVD-2026-122788

Improper Input Validation in the io-char library's DCMDCHRTCINJECTC devctl handler could allow an attacker with local access to cause data tampering in the memory input buffer of the Character I/O device driver...

6.2CVSS6AI score0.00152EPSS
SaveExploits0References1
CVE
CVE
•added 2026/11/10 6:39 p.m.•7 views

CVE-2026-54437

The io-char library contains an Improper Input Validation vulnerability in the DCMD_CHR_TCINJECTC devctl() handler . This flaw could allow an attacker with local access to perform data tampering within the memory input buffer of the Character I/O device driver . No specific remediation or exploit...

6.2CVSS6AI score0.00152EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/11/10 12:00 a.m.•4 views

PT-2026-144417

Improper Input Validation in the io-char library's DCMD CHR TCINJECTC devctl handler could allow an attacker with local access to cause data tampering in the memory input buffer of the Character I/O device driver...

6.2CVSS6.1AI score0.00152EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/11/10 12:00 a.m.•4 views

PT-2026-144416

Heap-based Buffer Overflow in the io-char library's DCMD CHR WAITINFO devctl handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or a crash in the Character I/O device driver...

7.4CVSS6.1AI score0.00112EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/11/05 10:57 p.m.•12 views

CVE-2026-85068 NUT blazer_usb ippon_command stack info-leak via unzeroed char tmp[64] in OUT-direction usb_control_msg

Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. From 2.4.2 through 2.8.5, ipponcommand in drivers/blazerusb.c partially initializes char tmp64 with a short Megatec status query and then passes a fixed...

2.4CVSS5.9AI score
SaveExploits0References5
osv_cleanstart
osv_cleanstart
•added 2026/10/31 1:56 p.m.•11 views

CLEANSTART-2025-QS42199 vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd

Security vulnerability affects the imagemagick package. A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd...

7.8CVSS6.5AI score0.01411EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/31 1:32 p.m.•12 views

CLEANSTART-2026-UD14012 Memory leak in the serial_exit_core function in hw/char/serial

Security vulnerability affects the qemu package. Memory leak in the serialexitcore function in hw/char/serial...

6.5CVSS6.8AI score0.00399EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/10/29 5:14 p.m.•14 views

CVE-2026-116620

A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The...

7.5CVSS6.5AI score0.00304EPSS
SaveExploits0
osv_azl
osv_azl
•added 2026/10/27 1:19 a.m.•18 views

AZL-111712 CVE-2026-116620 affecting package opencc 1.1.1-3

A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The...

7.5CVSS6.5AI score0.00304EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/27 1:19 a.m.•20 views

CVE-2026-116620

A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The...

7.5CVSS0.00304EPSS
SaveExploits0References6
osv_debian
osv_debian
•added 2026/10/27 1:19 a.m.•22 views

DEBIAN-CVE-2026-116620

A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The...

6.9CVSS6.5AI score0.00304EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/10/27 1:19 a.m.•17 views

AZL-111134 CVE-2026-116620 affecting package rapidjson 1.1.0-8

A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The...

7.5CVSS6.5AI score0.00304EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/10/27 1:19 a.m.•26 views

UBUNTU-CVE-2026-116620

A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The...

7.3CVSS6.5AI score0.00304EPSS
SaveExploits0References10
CVE
CVE
•added 2026/10/27 12:30 a.m.•49 views

CVE-2026-116620

A security vulnerability exists in Tencent RapidJSON (versions up to 1.1.0 ) within the Regex Parser component. Specifically, the function GenericStringStream<UTF8>::Take in include/rapidjson/stream.h is susceptible to an out-of-bounds read caused by manipulation. This vulnerability can be ...

7.5CVSS6.5AI score0.00304EPSS
SaveExploits0References6
Rows per page
Query Builder