775 matches found
resmack-fuzz-test
Resmack Fuzz Test This project is an exploration of a feedback-driven fuzzer that uses: ptrace for instrumentation with dynamic memory breakpoints specified by the target process process snapshotting/restoring using /proc/pid/map, /proc/pid/clearrefs, and /proc/pid/pagemap using processvmwritev...
CVE-2025-21293
CVE-2025-21293 CVE-2025-21293 is an elevation of privilege vulnerability in Active Directory Domain Services. It allows "Network Configuration Operators" to execute code with SYSTEM privileges via Windows Performance Counters. Affected Windows versions include Windows 10, 11, and Server. Microsof...
CVE-2026-68538
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...
EUVD-2026-124055
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...
CVE-2026-68538 fulgur: Unbounded counters() expansion in generated content causes memory/CPU exhaustion (denial of service)
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...
CVE-2026-68538 fulgur: Unbounded counters() expansion in generated content causes memory/CPU exhaustion (denial of service)
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...
CVE-2026-68538
The fulgur library, used to convert HTML/CSS to PDF, is vulnerable to a Denial of Service (DoS) attack in versions 0.15.0 to before 0.27.0 . The root cause is the lack of bounds on the CSS counters(name, sep) function expansion, neither for single expansions nor aggregate work across an element t...
CVE-2026-68538
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...
suricata_exporter
Suricata Prometheus Exporter This is a Prometheus Exporter for Suricata using dump-counters via the unix socket to query metrics. Usage $ ./suricataexporter -h Usage of ./suricataexporter: -suricata.socket-path string Path to the Suricata Command socket. default "/var/run/suricata.socket" -versio...
PT-2026-145539
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...
CVE-2026-92544
SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against the Kong database via a crafted model name...
CVE-2026-92544
A SQL injection vulnerability exists in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway . An attacker can execute arbitrary SQL commands against the Kong database by providing a crafted model name . While the technical root cause is identified as improper neutralization of s...
EUVD-2026-122938
SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against the Kong database via a crafted model name...
CVE-2026-95975
Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network...
CVE-2026-88220
Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally...
CVE-2026-113768
Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network...
CVE-2026-113768
A heap-based buffer overflow exists in Windows Performance Counters , which could allow an unauthorized attacker to achieve remote code execution over a network. While the documents confirm the vulnerability's presence and impact, specific technical details regarding the root cause or affected ve...
EUVD-2026-121933
Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network...
CVE-2026-95975
A heap-based buffer overflow vulnerability exists in Windows Performance Counters , which could allow an unauthorized attacker to execute code over a network. The vulnerability is tracked as CVE-2026-95975 . While the provided documents confirm the existence of the vulnerability and its potential...