CVE-2026-13214

The OCPP 1.6 client in subsys/net/lib/ocpp/ocppj.c contains a stack buffer overflow in parsegetconfigmsg. When handling a GetConfiguration request from the central system, the handler copied the attacker-controlled JSON "key" string into the caller's fixed 50-byte stack buffer skeyCISTR50, declar...

New-lib3mf.dll-for-MeshMixer

Nova lib3mf.dll para MeshMixer lib3mf.dll pré-compilada para MeshMixer que inclui um patch backportado para o CVE-2021-21772 e uma versão atualizada do zlib 1.3.1. Substitua o original em C:\Program Files\Autodesk\Meshmixer\ Código fonte incluído, se desejar compilá-lo você mesmo. CVE-2021-21772:...

Server-side Request Forgery (SSRF)

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the urlopen process in nltk/pathsec.py. An attacker can reach internal-only HTTP resources by supplying a...

Arbitrary Argument Injection

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Arbitrary Argument Injection via the Repo.blame and Repo.blameincremental option check in git/repo/base.py. An attacker can read local files by supplying a blame...

External Control of File Name or Path

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to External Control of File Name or Path via the TagReference.create function in git/refs/tag.py. An attacker can read local files by supplying a positional reference val...

Deserialization of Untrusted Data

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the parse method in nltk/parse/transitionparser.py. An attacker can execute arbitrary Python code by...

External Control of File Name or Path

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to External Control of File Name or Path through the Submodule.configparser path in git/objects/submodule/base.py. An attacker can disclose the first line of a readable...

Arbitrary Argument Injection

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Arbitrary Argument Injection via the writesection serialization path in git/config.py. An attacker can create a dormant multi-line value in a Git config file and trigg...

Directory Traversal

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Directory Traversal through Repo.clone and Repo.clonefrom in git/repo/base.py. An attacker can create a Git repository metadata directory outside the intended clone...

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Improper Restriction of Recursive Entity References in DTDs 'XML Entity Expansion' via the raw xml.etree.ElementTree parsing in...

Untrusted Search Path

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Untrusted Search Path through the dot2img function in nltk/parse/dependencygraph.py and the AlignedSent.reprsvg method in nltk/translate/api.py...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the AV1 RTP packetizer’s ffrtpsendav1 keyframe sequence-header search loop in libavformat/rtpencav1.c. An attacker can make FFmpeg read past the end of an AV1 packet by supplying a crafted AV1 frame with an...

o3_finds_cve-2025-37899

basato su Come ho usato o3 per trovare CVE-2025-37899, una vulnerabilità zero-day remota nell'implementazione SMB del kernel Linux vulnerabilità target vulnerabilità ollama CVE-2024-37032 https://github.com/ollama/ollama/releases/tag/v0.1.34...

freebsd-dhclient-poc

CVE-2020-7461 Reproducer PoC Autoren: Moshe Kol, Shlomi Oberman Reproducer PoC für die heap-basierte Pufferüberlauf-Schwachstelle in FreeBSD dhclient beim Parsen von DHCP-Option 119 CVE-2020-7461. Das Problem befindet sich in der Funktion findsearchdomainnamelen in der Datei...

CVE-2026-78637 Fdawgs node-poppler Argument Injection index.js pdfUnite argument injection

A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFonts/pdfDetach/pdfAttach/pdfSeparate/pdfUnite of the file src/index.js of the component Argument Injection Handler...

CVE-2026-78637

CVE-2026-78637 is an argument injection vulnerability in Fdawgs node-poppler (versions up to 9.1.2/10.0.1 ), a Node.js wrapper for the Poppler PDF library. The flaw resides in the Argument Injection Handler within src/index.js, affecting multiple PDF conversion and manipulation functions includin...

CVE-2026-78637 Fdawgs node-poppler Argument Injection index.js pdfUnite argument injection

A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFonts/pdfDetach/pdfAttach/pdfSeparate/pdfUnite of the file src/index.js of the component Argument Injection Handler...

CVE-2026-78637 Fdawgs node-poppler Argument Injection index.js pdfUnite argument injection

A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFonts/pdfDetach/pdfAttach/pdfSeparate/pdfUnite of the file src/index.js of the component Argument Injection Handler...

EUVD-2026-65293

A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFonts/pdfDetach/pdfAttach/pdfSeparate/pdfUnite of the file src/index.js of the component Argument Injection Handler...

EUVD-2026-65292

The Zephyr ext2 filesystem driver fails to validate the slogblocksize field of the on-disk superblock when mounting a filesystem. ext2verifydisksuperblock in subsys/fs/ext2/ext2impl.c checks the magic number, revision, inode size and group counts, but never bounds slogblocksize. On a successful...