2783 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-84961
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON. Because JSON...
toml-node: Uncontrolled Recursion
Summary toml.parse crashes with an uncaught RangeError: Maximum call stack size exceeded when parsing deeply nested arrays or inline tables. The parser is generated by Peggy 5.1.0 a PEG parser generator as a recursive-descent parser; the value rule mutually recurses with the array and inline-tabl...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in lib/parser.js, where the mutually recursive peg$parsevalue, peg$parsearray, and peg$parseinlinetableentry functions recurse to the input's nesting depth with no depth limit. An attacker can crash the process wi...
PT-2026-85338
Description The path filters pick, ignore, filter, and replace — the library's headline "surgical extraction" feature — recompute the full path string from the nesting stack on every checkable token. Because the stack length equals the current nesting depth, and a checkable token is emitted at...
netsentryx — Updated!
NetSentryx PRO 🛡️ AI-Driven, High-Performance Real-Time Network Observability & Threat Detection Engine NetSentryx PRO is a next-generation, event-driven network monitoring and threat intelligence platform. Combining rule-based signatures with a PyTorch Deep Autoencoder, it provides sub-10ms packe...
OPENSUSE-SU-2026:21737-1 Security update for openexr
This update for openexr fixes the following issues: - CVE-2026-59183: unmapped memory access leading to crash due to int32t multiplication overflow in unpacksampletable when decoding a crafted deep tiled EXR file bsc1276428. - CVE-2026-59184: out-of-bounds or use-after-free writes when processing...
TrustTunnel v1.1.0
Clients · App Store iOS · App Store macOS · Play store Table of Contents Introduction Server Features Client Features Quick start Endpoint setup Install the endpoint Updating the endpoint Endpoint configuration wizard Let's Encrypt certificate lifecycle Running endpoint Export client configuratio...
nDPI v6.0
nDPI What is nDPI ? nDPI® is an open source LGPLv3 library for deep-packet inspection. A generic FAQ about nDPI is available here How To Compile nDPI In order to compile this project do ./autogen.sh && ./configure make If you get some errors while compiling croaring.c, try: ./autogen.sh &&...
K000163139: NLnet Labs Unbound vulnerability CVE-2026-33278
Security Advisory Description NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execution as a result of deep copying a data structure and erroneously overwriting a destination pointer. ...
CVE-2026-19873 HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements
HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has countername set, its process method reads the repeat count from the named query string parameter, checks only that it is ...
CVE-2026-19873
The HTML::FormFu Perl module (versions through 2.08 ) is vulnerable to a resource exhaustion attack (Denial of Service) due to an unbounded repeat count in Repeatable elements. When counter_name is set, the process() method reads a count from the query string and deep-clones the child subtree for...
CVE-2026-19873
HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has countername set, its process method reads the repeat count from the named query string parameter, checks only that it is ...
CVE-2026-19873: Improper Validation of Specified Quantity in Input
HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has countername set, its process method reads the repeat count from the named query string parameter, checks only that it is ...
ROOT-APP-NPM-CVE-2021-26707 CVE-2021-26707 in merge-deep - Patched by Root
Root has patched CVE-2021-26707 in the merge-deep package for Root:npm. Multiple fixed versions available...
REPLICANT: Learning Policies for Evading and Hardening Malware Detectors
To determine the real-world effectiveness of machine learning based malware detection, it is vital to evaluate its robustness against highly capable adversaries. However, state-of-the-art attacks do not effectively model realistic adversaries, as they often assume access to privileged information...
Linux Distros Unpatched Vulnerability : CVE-2026-16440
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault. CVE-2026-16440 Note that Nessus relies ...
Linux Distros Unpatched Vulnerability : CVE-2026-59982
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11,...
Linux Distros Unpatched Vulnerability : CVE-2026-59187
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.3.0 through...
Linux Distros Unpatched Vulnerability : CVE-2026-59983
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11,...
Unchecked Input for Loop Condition
Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via the FeatStructReader in nltk/featstruct.py. An attacker can trigger an unhandled RecursionError and cras...