106 matches found
CVE-2026-35202 Pterodactyl has a database resource limit bypass via race condition in Client API
Pterodactyl is a free, open-source game server management panel. Prior to version 1.12.3, the Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database allocations. This happens because the database locking mechanism used in the controllers is totally broke...
CVE-2026-35202: Time-of-check Time-of-use (TOCTOU) Race Condition
Pterodactyl is a free, open-source game server management panel. Prior to version 1.12.3, the Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database allocations. This happens because the database locking mechanism used in the controllers is totally broke...
io.github.bkoehm:apacheds-embedded (>=0.5, <=0.6), org.apache.activemq.examples.broker:security-ldap (>=2.24.0, <=2.31.1) +68 more potentially affected by CVE-2026-35563 via org.apache.directory.api:api-ldap-client-api (>=2.0.0, <=2.1.7)
org.apache.directory.api:api-ldap-client-api MAVEN version =2.0.0, =0.5, =2.24.0, =0.1.0, =4.7.0, =2.3.0, =1.1.0, =1.1.0, =1.1.0, =3.0.0, =3.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0.am25, =2.0.0.am25, =2.0.0.am27 and more Source cves: CVE-2026-35563 Source advisory: OSV:GHSA-85RW-G4F4-JPRR...
io.github.bkoehm:apacheds-embedded (>=0.5, <=0.6), org.apache.activemq.examples.broker:security-ldap (>=2.24.0, <=2.31.1) +68 more potentially affected by CVE-2026-35563 via org.apache.directory.api:api-ldap-client-api (>=2.0.0, <=2.1.7)
org.apache.directory.api:api-ldap-client-api MAVEN version =2.0.0, =0.5, =2.24.0, =0.1.0, =4.7.0, =2.3.0, =1.1.0, =1.1.0, =1.1.0, =3.0.0, =3.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0.am25, =2.0.0.am25, =2.0.0.am27 and more Source cves: CVE-2026-35563 Source advisory: GHSA-85RW-G4F4-JPRR...
io.github.bkoehm:apacheds-embedded (>=0.5, <=0.6), org.apache.activemq.examples.broker:security-ldap (>=2.24.0, <=2.31.1) +68 more potentially affected by CVE-2026-35563 via org.apache.directory.api:api-ldap-client-api (>=2.0.0, <=2.1.7)
org.apache.directory.api:api-ldap-client-api MAVEN version =2.0.0, =0.5, =2.24.0, =0.1.0, =4.7.0, =2.3.0, =1.1.0, =1.1.0, =1.1.0, =3.0.0, =3.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0.am25, =2.0.0.am25, =2.0.0.am27 and more Source cves: CVE-2026-35563 Source advisory:...
io.github.bkoehm:apacheds-embedded (>=0.5, <=0.6), org.apache.activemq.examples.broker:security-ldap (>=2.24.0, <=2.31.1) +68 more potentially affected by CVE-2026-35563 via org.apache.directory.api:api-ldap-client-api (>=2.0.0, <=2.1.7)
org.apache.directory.api:api-ldap-client-api MAVEN version =2.0.0, =0.5, =2.24.0, =0.1.0, =4.7.0, =2.3.0, =1.1.0, =1.1.0, =1.1.0, =3.0.0, =3.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0.am25, =2.0.0.am25, =2.0.0.am27 and more Source cves: CVE-2026-35563 Source advisory: MEND:CVE-2026-35563...
[SECURITY] Fedora 44 Update: kwayland-6.6.4-1.fc44
Qt-style API to interact with the wayland-client API...
CVE-2026-4395
CVE-2026-4395 affects wolfSSL wolfcrypt KCAPI ECC: a heap-based buffer overflow in wc_ecc_import_x963_ex() allows an attacker to write beyond the pubkey_raw buffer (132 bytes) when parsing a crafted oversized ECPoint in ServerKeyExchange. The path copies input to key->pubkey_raw via XMEMCPY wi...
CVE-2026-31863 Improper Restriction of Excessive Authentication Attempts in github.com/anyproto/anytype-heart
Anytype Heart is the middleware library for Anytype. The challenge-based authentication for the local gRPC client API can be bypassed, allowing an attacker to gain access without the 4-digit code. This vulnerability is fixed in anytype-heart 0.48.4, anytype-cli 0.1.11, and Anytype Desktop 0.54.5...
CVE-2026-31863: Improper Restriction of Excessive Authentication Attempts
Anytype Heart is the middleware library for Anytype. The challenge-based authentication for the local gRPC client API can be bypassed, allowing an attacker to gain access without the 4-digit code. This vulnerability is fixed in anytype-heart 0.48.4, anytype-cli 0.1.11, and Anytype Desktop 0.54.5...
ROS-20260209-73-0012
A vulnerability in the HTTP Client API component of the OpenSSL cryptographic library is related to reading beyond memory boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
SUSE CVE-2021-2007
Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...
OpenSSL HTTP Client API DoS
The vulnerability of the HTTP Client API component of the OpenSSL cryptographic library relates to reading beyond the memory boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
EUVD-2006-3265
Malware in sbrugna...
EUVD-2015-4736
Malware in sbrugna...
EUVD-2008-1337
Malware in sbrugna...
EUVD-2022-31207
Malicious code in bioql PyPI...
SUSE CVE-2025-9232
Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...
CVE-2025-9232
Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...
CVE-2025-9232: Out-of-bounds Read
Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...