CVE-2026-54451

Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attacker-controlled protobuf bytes with Protobuf.Decoder can be taken offline when the schema contains a self-referential or cyclic message type. In lib/protobuf/decoder.ex,...

CVE-2026-82760

AshAuthentication (Elixir library by team-alembic) is vulnerable to CPU and memory exhaustion via superlinear base62 decoding in the API key sign-in flow. The root cause is in AshAuthentication.Base.decode62/1, which recomputes Integer.pow(62, index) at every character position instead of accumul...

CVE-2026-92839

Canva Desktop before v1.125.0 performed double decoding in the deeplink handler. A threat actor could cause the application to load arbitrary same-origin content under the user’s session...

CVE-2026-92839

Canva Desktop versions prior to v1.125.0 are affected by a double decoding flaw in the application's deeplink handler. An attacker can exploit this to load arbitrary same-origin content under a victim's active session, resulting in a Low integrity impact with no confidentiality or availability im...

WeaveMark

WeaveMark Robust and Scalable Multi-bit LLM Watermarking via Coded Payload Spreading （コード化ペイロード拡散による堅牢かつスケーラブルなマルチビットLLM透かし）のリファレンス実装。 WeaveMarkは、トークン分布にバイアスをかけずに k...

Rom-0-Decoder

このリポジトリには README がありません。...

CVE-2025-29632

Autor: HanyiLuo, Yuqi Huo CVE-2025-29632 la información de la vulnerabilidad cubierta por CVE-2025-29632 Versiones afectadas: 4.0.0 y versiones anteriores Cuando free5gc procesa el InitialUEMessage, solo comprueba si la referencia nASPDU es nil es decir, si es un puntero nulo, pero no verifica si...

CVE-2025-55752

🚨🚨 CVE-2025-55752 — Apache Tomcat: Rewrite Valve によるディレクトリ保護バイパス → PUT ベースの RCE🚨🚨 概要 CVE-2025-55752 は、Apache Tomcat においてバグ 60013 の修正中に導入されたセキュリティリグレッションです。Rewrite Valve が使用されている場合、Tomcat は URL デコード の前に パス正規化 を適用します。この誤った順序により、StandardContextValve.java で実装されている /WEB-INF/ や /META-INF/...

postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin

A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...

CVE-2025-55182-exploit

CVE-2025-55182 エクスプロイト このリポジトリには、React Server Components における重大なリモートコード実行（RCE）脆弱性である CVE-2025-55182 用のシンプルなエクスプロイトが含まれています。 脆弱性の概要 CVE-2025-55182 は、React Server Components における認証不要のリモートコード実行脆弱性です（CVSS 10.0）。この脆弱性は、React が React Server Function エンドポイントに送信されたペイロードをデコードする方法に影響を及ぼし、攻撃者が悪意のある HTTP...

Important: postgresql:18 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: SQL injection in pgcreatesubscriber allows arbitrary SQL execution as superuser CVE-2026-6476 postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector an...

CVE-2026-69205 Http4s: Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HeaderP.parse uses a case-sensitive substring test for the Transfer-Encoding value and decodes header bytes with the platform default charset. Values such as Chunked are not recognized, values such as notchunke...

CVE-2026-69205

Http4s (a Scala HTTP library) is affected in its Ember backend, specifically the HeaderP.parse function, which uses a case-sensitive substring test for the Transfer-Encoding value and decodes header bytes with the platform default charset. This causes mismatches with RFC-compliant intermediaries,...

CVE-2026-91952

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can send specially crafted AVC444 graphics updates. This can cause the pooldecoderect function to enter an infinite loop when decoding AVC444 metablocks with an excessive number of region rectangles. The vulnerability lea...

CVE-2026-91952 FreeRDP before 3.31.0 Denial of Service via pool_decode_rect

FreeRDP versions before 3.31.0 contain an infinite-loop denial of service in the pooldecoderect function when decoding AVC444 metablocks with more region rectangles than preallocated worker array size. A malicious RDP server can send crafted AVC444 graphics updates causing the threaded decode pat...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin

A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...