655808 matches found
CVE-2026-111732
Versions of P-Net prior to 1.0.3 are vulnerable to an out-of-bounds write when built with the PNET_OPTION_AR_VENDOR_BLOCKS option enabled. The software fails to validate a data length field from an ARVendorBlock request against the fixed-size buffer capacity, using the provided length as the byte...
CVE-2026-111732 Out-of-bounds write when parsing AR Vendor Block requests
P-Net before 1.0.3, when built with PNETOPTIONARVENDORBLOCKS enabled, parses a data length from a field of the ARVendorBlock request that is not part of the block definition and uses it as the number of bytes to copy into a fixed-size buffer, without comparing it with the buffer size or the block...
EUVD-2026-113006
P-Net before 1.0.3, when built with PNETOPTIONARVENDORBLOCKS enabled, parses a data length from a field of the ARVendorBlock request that is not part of the block definition and uses it as the number of bytes to copy into a fixed-size buffer, without comparing it with the buffer size or the block...
CVE-2026-118021
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the XPCOM component...
CVE-2026-111730 Out-of-bounds write in CheckPeers block parser due to unvalidated peer station name length
P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in getcheckpeer. The received length up to 255 was used to copy data into the 241-byte peer station name buffer and to place the terminating NUL byte, so a crafted block writes up to 15 bytes past the end o...
CVE-2026-111730
P-Net versions prior to 1.0.3 are vulnerable to an out-of-bounds write within the get_check_peer() function. The root cause is a failure to validate the LengthPeerStationName field of a CheckPeers block , where a received length of up to 255 is used to copy data into a fixed 241-byte buffer . Thi...
EUVD-2026-113004
P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in getcheckpeer. The received length up to 255 was used to copy data into the 241-byte peer station name buffer and to place the terminating NUL byte, so a crafted block writes up to 15 bytes past the end o...
CVE-2026-111730
P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in getcheckpeer. The received length up to 255 was used to copy data into the 241-byte peer station name buffer and to place the terminating NUL byte, so a crafted block writes up to 15 bytes past the end o...
Malicious code in spectral-core (npm)
Source: amazon-inspector 451c36f03e81be0ff6c85334587d7ff401de1e5134e179557ec4bc454cd7ba76 The tarball ships only package.json and binding.gyp plus a markdown file, with gypfile: true set in package.json so npm invokes node-gyp rebuild on install. binding.gyp declares a 'none'-type target with no...
cve-2024-4577-lab
CVE-2024-4577 — PHP-CGI Argument Injection → RCE Docker Lab / CTF A self-contained, from-scratch Docker lab that demonstrates the real argument-injection → Remote Code Execution primitive behind CVE-2024-4577. Exploit it over http://localhost:8080, pop a shell, and read the flag from inside the...
CVE-2026-42167
CVE-2026-42167: SQL Injection in ProFTPD modsql 📋 Executive Summary CVE-2026-42167 is a critical SQL injection vulnerability in ProFTPD's modsql module that allows authentication bypass , backdoor user injection , and remote code execution RCE. Attribute| Value ---|--- Type| SQL Injection CWE-89...
EUVD-2026-112996
Shop manager PHP Object Injection in FV Flowplayer Video Player = 8.3.4 versions...
CVE-2026-118075 WordPress WP Media folders plugin <= 1.1.10 - PHP Object Injection vulnerability
Contributor PHP Object Injection in WP Media folders = 1.1.10 versions...
EUVD-2026-112991
Shop manager PHP Object Injection in Finale Lite = 2.21.0 versions...
EUVD-2026-112989
Shop manager PHP Object Injection in myPOS Checkout = 1.4.5 versions...
CVE-2026-116867
The WordPress Dynamic QR Code – generator plugin versions
CVE-2026-116867 WordPress Dynamic QR Code – generator plugin <= 1.0.1 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Dynamic QR Code generator = 1.0.1 versions...
CVE-2026-116867 WordPress Dynamic QR Code – generator plugin <= 1.0.1 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Dynamic QR Code generator = 1.0.1 versions...