CVE-2026-121994

A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-controlled debug target to execute arbitrary code in the GDB process. The vulnerability exists in fetchregisterusingp, which decodes a stub's register reply into an alloca-sized buffer without bounding writes b...

CVE-2026-120499

h5io before 0.2.6 contains a code injection vulnerability in readhdf5 that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which triageread passes to eval with builtins reachable, name an arbitrary module in...

CVE-2026-102739

ESPectre is a Wi-Fi motion sensing platform for ESP32. Prior to 3.0.0-rc1, Micro-ESPectre analysis tools, including tools/6optimizefilterparams.py, tools/1analyzerawdata.py, and tools/10trainmlmodel.py, load NPZ datasets with NumPy pickle support enabled through micro-espectre/tools/csiutils.py a...

CVE-2022-26134

CVE-2022-26134 - OGNL injection vulnerability. Script proof of concept that exploits the remote code execution vulnerability affecting Atlassian Confluence 7.18 and lower products. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or...

EUVD-2026-117602

h5io before 0.2.6 contains a code injection vulnerability in readhdf5 that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which triageread passes to eval with builtins reachable, name an arbitrary module in...

CVE-2026-120499 h5io before 0.2.6 Arbitrary Code Execution via read_hdf5

h5io before 0.2.6 contains a code injection vulnerability in readhdf5 that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which triageread passes to eval with builtins reachable, name an arbitrary module in...

CVE-2026-120499

The h5io library before version 0.2.6 is vulnerable to a code injection vulnerability within the read_hdf5() function. An attacker can execute arbitrary code by providing a specially crafted HDF5 file using several methods: storing Python code in a node titled timezone (which is passed to eval() ...

CVE-2026-120499 h5io before 0.2.6 Arbitrary Code Execution via read_hdf5

h5io before 0.2.6 contains a code injection vulnerability in readhdf5 that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which triageread passes to eval with builtins reachable, name an arbitrary module in...

CVE-2026-12485

🚨 CVE-2026-12485 - Critical Unauthenticated Remote Code Execution RCE GeoVision GV-I/O Box 4E – Firmware v2.09 Disclosure Date: June 23, 2026 CWE: CWE-121 – Stack-Based Buffer Overflow Attack Vector: Network Unauthenticated An unauthenticated stack-based buffer overflow vulnerability in the...

CVE-2026-76077 ASN1SCC: Stack buffer overflow and out-of-bounds read in XER tokenizer NT()

ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the XER tokenizer NT in asn1crt/asn1crtencodingxer.c, which is reached by all XER decode paths, copies tag characters into a fixed char Value100 field without a length bound and reads input and lookahead bytes withou...

CVE-2026-76077

The ASN1SCC open-source ASN.1 compiler for embedded systems is vulnerable to a stack buffer overflow and out-of-bounds read in the XER tokenizer NT() function located in asn1crt/asn1crt_encoding_xer.c. This component is accessed by all XER decode paths. The root cause is the copying of tag charac...

CVE-2026-75614

The ASN1SCC open-source ASN.1 compiler for embedded systems is vulnerable to an out-of-bounds write prior to version 4.7.0.1 . The root cause lies in the BitStream_DecodeConstraintWholeNumber function within asn1crt/asn1crt_encoding.c, which fails to reject values exceeding the declared range whe...

CVE-2026-75614 ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN)

ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStreamDecodeConstraintWholeNumber in asn1crt/asn1crtencoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encoded range is not a power of two. Generate...

EUVD-2026-117599

ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStreamDecodeConstraintWholeNumber in asn1crt/asn1crtencoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encoded range is not a power of two. Generate...

CVE-2026-75614 ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN)

ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStreamDecodeConstraintWholeNumber in asn1crt/asn1crtencoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encoded range is not a power of two. Generate...

kernel: udp: fix potential use-after-free in tunnel segmentation

A flaw was found in the Linux kernel's UDP User Datagram Protocol tunnel segmentation. This vulnerability arises when the system attempts to process network packets, specifically in the skbudptunnelsegment function. An attacker could potentially exploit a use-after-free condition, where the syste...

CVE-2023-6972-Exploit-Arbitrary-File-Deletion

CVE-2023-6972 Proof of Concept PoC Description This repository contains a Proof of Concept PoC exploit for CVE-2023-6972. The vulnerability allows for Unauthenticated Arbitrary File Deletion AFD in Wordpress Backup Migration Plugin Note: A comprehensive technical breakdown, full case study, and...

chromium-browser: angle: Chromium-browser: Arbitrary code execution via use-after-free vulnerability in ANGLE

A flaw was found in chromium-browser. A use-after-free vulnerability in ANGLE allows a remote attacker to execute arbitrary code outside the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to a complete compromise of the affected system...

chromium-browser: angle: Chromium: Arbitrary code execution via buffer overflow in ANGLE

A flaw was found in Chromium's ANGLE component. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the execution of arbitrary code outside the browser's security sandbox, potentially compromising the affect...

chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page

A flaw was found in ANGLE, a graphics engine used in Google Chrome. This vulnerability, caused by improper validation of an array index, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation can occur when a user visits a specially crafted HTML...