RCE_CVE-2024-7954-

RCECVE-2024-7954- The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request. CRITICAL Exploit: POST...

firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget

A flaw was found in Firefox. Incorrect boundary condition handling in the Win32 widget component allows an attacker to escape the browser's restricted sandbox environment. An attacker who has compromised a sandboxed content process could exploit this vulnerability to achieve privilege escalation...

firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget

A flaw was found in Firefox. Incorrect boundary condition handling in the Win32 widget component allows an attacker to escape the browser's restricted sandbox environment. An attacker who has compromised a sandboxed content process could exploit this vulnerability to achieve privilege escalation...

CVE-2026-75614

ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStreamDecodeConstraintWholeNumber in asn1crt/asn1crtencoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encoded range is not a power of two. Generate...

CVE-2026-76077

ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the XER tokenizer NT in asn1crt/asn1crtencodingxer.c, which is reached by all XER decode paths, copies tag characters into a fixed char Value100 field without a length bound and reads input and lookahead bytes withou...

CVE-2026-54141

OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13, a remote direct message received through a configured Yuanbao channel is converted into a generic channel AgentTurnRequest that uses the default tool policy without establishing an...

CVE-2026-123151

A flaw was found in the GNU debugger GDB. When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potentially allow the target to execute arbitrary code in the GDB client process with...

CVE-2026-121997

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actual data length, causing hex2bin to writ...

CVE-2026-121994

A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-controlled debug target to execute arbitrary code in the GDB process. The vulnerability exists in fetchregisterusingp, which decodes a stub's register reply into an alloca-sized buffer without bounding writes b...

CVE-2026-120499

h5io before 0.2.6 contains a code injection vulnerability in readhdf5 that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which triageread passes to eval with builtins reachable, name an arbitrary module in...

CVE-2026-102739

ESPectre is a Wi-Fi motion sensing platform for ESP32. Prior to 3.0.0-rc1, Micro-ESPectre analysis tools, including tools/6optimizefilterparams.py, tools/1analyzerawdata.py, and tools/10trainmlmodel.py, load NPZ datasets with NumPy pickle support enabled through micro-espectre/tools/csiutils.py a...

CVE-2022-26134

CVE-2022-26134 - OGNL injection vulnerability. Script proof of concept that exploits the remote code execution vulnerability affecting Atlassian Confluence 7.18 and lower products. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or...

EUVD-2026-117602

h5io before 0.2.6 contains a code injection vulnerability in readhdf5 that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which triageread passes to eval with builtins reachable, name an arbitrary module in...

CVE-2026-120499 h5io before 0.2.6 Arbitrary Code Execution via read_hdf5

h5io before 0.2.6 contains a code injection vulnerability in readhdf5 that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which triageread passes to eval with builtins reachable, name an arbitrary module in...

CVE-2026-120499 h5io before 0.2.6 Arbitrary Code Execution via read_hdf5

h5io before 0.2.6 contains a code injection vulnerability in readhdf5 that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which triageread passes to eval with builtins reachable, name an arbitrary module in...

CVE-2026-120499

The h5io library before version 0.2.6 is vulnerable to a code injection vulnerability within the read_hdf5() function. An attacker can execute arbitrary code by providing a specially crafted HDF5 file using several methods: storing Python code in a node titled timezone (which is passed to eval() ...

CVE-2026-12485

🚨 CVE-2026-12485 - Critical Unauthenticated Remote Code Execution RCE GeoVision GV-I/O Box 4E – Firmware v2.09 Disclosure Date: June 23, 2026 CWE: CWE-121 – Stack-Based Buffer Overflow Attack Vector: Network Unauthenticated An unauthenticated stack-based buffer overflow vulnerability in the...

CVE-2026-76077 ASN1SCC: Stack buffer overflow and out-of-bounds read in XER tokenizer NT()

ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the XER tokenizer NT in asn1crt/asn1crtencodingxer.c, which is reached by all XER decode paths, copies tag characters into a fixed char Value100 field without a length bound and reads input and lookahead bytes withou...

CVE-2026-76077

The ASN1SCC open-source ASN.1 compiler for embedded systems is vulnerable to a stack buffer overflow and out-of-bounds read in the XER tokenizer NT() function located in asn1crt/asn1crt_encoding_xer.c. This component is accessed by all XER decode paths. The root cause is the copying of tag charac...

CVE-2026-75614

The ASN1SCC open-source ASN.1 compiler for embedded systems is vulnerable to an out-of-bounds write prior to version 4.7.0.1 . The root cause lies in the BitStream_DecodeConstraintWholeNumber function within asn1crt/asn1crt_encoding.c, which fails to reject values exceeding the declared range whe...