836245 matches found
LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport
Summary LMCache is vulnerable to Unauthenticated Remote Code Execution via Pickle Deserialization on the Multiprocess ZMQ Transport Details LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. T...
EUVD-2026-94261
LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport...
GHSA-W5F2-9Q9C-FF4H LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport
Summary LMCache is vulnerable to Unauthenticated Remote Code Execution via Pickle Deserialization on the Multiprocess ZMQ Transport Details LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. T...
CVE-2024-32002-poc
Bash Script: !/bin/bash Set Git configuration options git config --global protocol.file.allow always git config --global core.symlinks true Avoid warning messages set default branch to main git config --global init.defaultBranch main Define tell-tale path telltalepath="$PWD/tell.tale" Initialize...
CVE-2025-55182
RSC Detector - React Server Components Vulnerability Scanner A Python-based security scanner for detecting and exploiting React Server Components RSC vulnerabilities in Next.js applications. This tool performs passive detection, active fingerprinting, and RCE exploitation testing. ⚠️ WARNING : Thi...
kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content
Summary ValidateResponse panics on a nil pointer when a spec declares a response header with content instead of schema. doc.Validate accepts that document, so the crash comes from a spec the library just called valid. Same class as GHSA-jpcw-4wr7-c3vq, which covered the request-parameter case in...
EUVD-2026-102159
kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content...
GHSA-74VM-87HJ-R66F kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content
Summary ValidateResponse panics on a nil pointer when a spec declares a response header with content instead of schema. doc.Validate accepts that document, so the crash comes from a spec the library just called valid. Same class as GHSA-jpcw-4wr7-c3vq, which covered the request-parameter case in...
Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination
Summary Wasmtime's WASI filesystem implementation lets a guest with a read-only source file capability overwrite that file by hard-linking it into another preopen that allows file writes. An attacker who can run a WASI guest can bypass WasiCtxBuilder per-preopen FilePerms and modify host files th...
EUVD-2026-42393
Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination...
GHSA-4CH3-9J33-3PMJ Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination
Summary Wasmtime's WASI filesystem implementation lets a guest with a read-only source file capability overwrite that file by hard-linking it into another preopen that allows file writes. An attacker who can run a WASI guest can bypass WasiCtxBuilder per-preopen FilePerms and modify host files th...
GHSA-6FJ4-RCR3-R7RR lopdf has a stack overflow via deeply nested PDF objects
lopdf::Document::loadmem and the other load entry points parses nested PDF arrays and dictionaries with unbounded recursion. A small crafted PDF whose Catalog contains a deeply nested array /X … , on the order of 10,000 levels exhausts the call stack and aborts the process with SIGABRT. Because...
lopdf has a stack overflow via deeply nested PDF objects
lopdf::Document::loadmem and the other load entry points parses nested PDF arrays and dictionaries with unbounded recursion. A small crafted PDF whose Catalog contains a deeply nested array /X … , on the order of 10,000 levels exhausts the call stack and aborts the process with SIGABRT. Because...
training-application-security
Free Secure Coding & Application Security Training — Open Source SCORM Exercises 40 free, open-source secure coding exercises that teach web application security the way developers learn — by exploiting real vulnerabilities like SQL injection, cross-site scripting XSS, and broken access control,...
JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS
Summary IPCameraFrameGrabber parses the Content-Length value from the multipart MJPEG HTTP stream returned by the configured IP camera without any bounds checking. A malicious or compromised camera endpoint - or any network attacker able to tamper with the plaintext HTTP response these streams ar...
GHSA-RXJV-24XQ-76WC JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS
Summary IPCameraFrameGrabber parses the Content-Length value from the multipart MJPEG HTTP stream returned by the configured IP camera without any bounds checking. A malicious or compromised camera endpoint - or any network attacker able to tamper with the plaintext HTTP response these streams ar...
EUVD-2026-103157
JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries. Prior to 1.5.14, IPCameraFrameGrabber doubles a 32-bit buffer capacity without checking for overflow or bounding the parsed Content-Length. An application consumes an MJPEG response from a malicious camera endpoint...
CVE-2026-102834
JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries. Prior to 1.5.14, IPCameraFrameGrabber doubles a 32-bit buffer capacity without checking for overflow or bounding the parsed Content-Length. An application consumes an MJPEG response from a malicious camera endpoint...
CVE-2026-102834 JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS
JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries. Prior to 1.5.14, IPCameraFrameGrabber doubles a 32-bit buffer capacity without checking for overflow or bounding the parsed Content-Length. An application consumes an MJPEG response from a malicious camera endpoint...
CVE-2026-102834
Prior to version 1.5.14 , JavaCV is vulnerable to an integer overflow in the IPCameraFrameGrabber component. The software doubles a 32-bit buffer capacity without checking for overflow or bounding the parsed Content-Length . An attacker can exploit this by providing an oversized Content-Length he...