Lucene search
+L

23 matches found

Kitploit
Kitploit
added 2026/09/08 11:50 p.m.9 views

CVE-2022-30292

CVE-2022-30292 Description This vulnerability is the heap-based buffer overflow in the function threadcall in Squirrel 3.2 and below. It caused by the lack of the call of sqreservestack function. This vulnerability leads to DoS of the client and could possibly lead to sandbox escape and arbitrary...

10CVSS8.1AI score0.03562EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.17 views

Linux Distros Unpatched Vulnerability : CVE-2026-55894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw...

6.8CVSS6.2AI score0.00134EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/08/20 9:31 p.m.16 views

CVE-2026-55894

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

6.8CVSS5.9AI score0.00134EPSS
SaveExploits0
OSV
OSV
added 2026/08/20 9:31 p.m.18 views

CVE-2026-55894 Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

6.8CVSS6.1AI score
SaveExploits0References8
Cvelist
Cvelist
added 2026/06/25 8:01 a.m.40 views

CVE-2026-46751 Apache Kvrocks: Does not remove the unsafe loadstring function from its Lua sandbox, allowing a user who can run EVAL scripts to load crafted, unvalidated bytecode that crashes the server process, resulting in a remote denial of service.

A vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 2.2.0 through 2.15.0. Users are recommended to upgrade to version 2.16.0, which fixes the issue...

5.5CVSS0.00326EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/25 8:01 a.m.25 views

CVE-2026-46751

CVE-2026-46751 affects Apache Kvrocks (2.2.0–2.15.0). The root cause is that Kvrocks does not remove the unsafe loadstring function from its Lua sandbox, enabling a user who can run EVAL scripts to load crafted, unvalidated bytecode that crashes the server process, resulting in a remote denial of...

5.5CVSS5.8AI score0.00326EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/03/24 3:27 a.m.20 views

CVE-2026-4745 Arbitrary Code Execution via Crafted Bytecode in dendibakh/perf-ninja

Improper Control of Generation of Code 'Code Injection' vulnerability in dendibakh perf-ninja labs/misc/pgo/lua modules. This vulnerability is associated with program files ldo.C. This issue affects perf-ninja...

10CVSS5.8AI score0.00286EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/24 3:27 a.m.45 views

CVE-2026-4745 Arbitrary Code Execution via Crafted Bytecode in dendibakh/perf-ninja

Improper Control of Generation of Code 'Code Injection' vulnerability in dendibakh perf-ninja labs/misc/pgo/lua modules. This vulnerability is associated with program files ldo.C. This issue affects perf-ninja...

10CVSS0.00286EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/24 3:27 a.m.29 views

CVE-2026-4745

CVE-2026-4745 is an Arbitrary Code Execution in dendibakh perf-ninja (labs/misc/pgo/lua modules) linked to the vulnerable program file ldo.C. The issue arises from improper generation of code (Code Injection) in perf-ninja, affecting the Lua-related components. The CVSS 4.0 base score is 10.0 (CR...

10CVSS5.8AI score0.00286EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2021-1302

Malware in sbrugna...

7.5CVSS6.8AI score0.0151EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:22 a.m.9 views

SUSE CVE-2018-19184

cmd/evm/runner.go in Go Ethereum aka geth 1.8.17 allows attackers to cause a denial of service SEGV via crafted bytecode...

7.5CVSS6.8AI score0.0151EPSS
SaveExploits1References3
OSV
OSV
added 2021/06/29 9:23 p.m.71 views

GHSA-9H4H-8W5P-F28W Go Ethereum Denial of Service

cmd/evm/runner.go in Go Ethereum aka geth allows attackers to cause a denial of service SEGV via crafted bytecode. Specific Go Packages Affected github.com/ethereum/go-ethereum/cmd/evm...

7.5CVSS7.2AI score0.0151EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/06/29 9:23 p.m.61 views

Go Ethereum Denial of Service

cmd/evm/runner.go in Go Ethereum aka geth allows attackers to cause a denial of service SEGV via crafted bytecode. Specific Go Packages Affected github.com/ethereum/go-ethereum/cmd/evm...

7.5CVSS7AI score0.0151EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2019/04/22 4:29 p.m.11 views

PYSEC-2019-155

python-dbusmock before version 0.15.1 AddTemplate D-Bus method call or DBusTestCase.spawnservertemplate method could be tricked into executing malicious code if an attacker supplies a .pyc file...

9.3CVSS7.2AI score0.01831EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2018/12/17 12:00 a.m.10 views

PT-2018-15182

Name of the Vulnerable Software and Affected Versions YARA version 3.8.1 Description The issue arises from the design of the YARA virtual machine, where bytecode in a specially crafted compiled rule can expose information about its environment. This occurs in the libyara/exec.c component...

9.1CVSS6.7AI score0.02996EPSS
SaveExploits12References29
CNVD
CNVD
added 2018/11/13 12:00 a.m.10 views

Go Ethereum Denial of Service Vulnerability

Go Ethereum aka geth is an open source implementation of the Ether protocol written in the Go language. A security vulnerability exists in the cmd/evm/runner.go file in Go Ethereum version 1.8.17. An attacker can exploit the vulnerability with the help of specially crafted bytecode to cause a...

7.5CVSS6.6AI score0.0151EPSS
SaveExploits1References1
Prion
Prion
added 2018/11/12 2:29 a.m.19 views

Code injection

cmd/evm/runner.go in Go Ethereum aka geth 1.8.17 allows attackers to cause a denial of service SEGV via crafted bytecode...

5CVSS7.3AI score0.0151EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2018/11/12 2:29 a.m.34 views

CVE-2018-19184

cmd/evm/runner.go in Go Ethereum aka geth 1.8.17 allows attackers to cause a denial of service SEGV via crafted bytecode...

7.5CVSS7.3AI score0.0151EPSS
SaveExploits1References1
OSV
OSV
added 2018/11/12 2:29 a.m.26 views

CVE-2018-19184

cmd/evm/runner.go in Go Ethereum aka geth 1.8.17 allows attackers to cause a denial of service SEGV via crafted bytecode...

7.5CVSS6.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2018/11/12 12:00 a.m.9 views

PT-2018-14845 · Ethereum · Go-Ethereum

Name of the Vulnerable Software and Affected Versions: Go Ethereum aka geth version 1.8.17 Description: The issue allows attackers to cause a denial of service SEGV via crafted bytecode. This is related to the cmd/evm/runner.go file in Go Ethereum. The estimated number of potentially affected...

7.5CVSS7.7AI score0.0151EPSS
SaveExploits1References8
Rows per page
Query Builder