Lucene search
+L

2783 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/04 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-84961

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON. Because JSON...

9.1CVSS5.5AI score0.00146EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/09/03 8:56 p.m.•18 views

toml-node: Uncontrolled Recursion

Summary toml.parse crashes with an uncaught RangeError: Maximum call stack size exceeded when parsing deeply nested arrays or inline tables. The parser is generated by Peggy 5.1.0 a PEG parser generator as a recursive-descent parser; the value rule mutually recurses with the array and inline-tabl...

7.5CVSS6.1AI score0.00609EPSS
SaveExploits0References4Affected Software1
Snyk
Snyk
•added 2026/09/03 8:56 p.m.•7 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in lib/parser.js, where the mutually recursive peg$parsevalue, peg$parsearray, and peg$parseinlinetableentry functions recurse to the input's nesting depth with no depth limit. An attacker can crash the process wi...

8.7CVSS5.8AI score0.00609EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/03 12:00 a.m.•24 views

PT-2026-85338

Description The path filters pick, ignore, filter, and replace — the library's headline "surgical extraction" feature — recompute the full path string from the nesting stack on every checkable token. Because the stack length equals the current nesting depth, and a checkable token is emitted at...

6.2CVSS5.9AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/02 9:09 p.m.•14 views

netsentryx — Updated!

NetSentryx PRO 🛡️ AI-Driven, High-Performance Real-Time Network Observability & Threat Detection Engine NetSentryx PRO is a next-generation, event-driven network monitoring and threat intelligence platform. Combining rule-based signatures with a PyTorch Deep Autoencoder, it provides sub-10ms packe...

6.2AI score
SaveExploits0
OSV
OSV
•added 2026/09/02 9:40 a.m.•8 views

OPENSUSE-SU-2026:21737-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2026-59183: unmapped memory access leading to crash due to int32t multiplication overflow in unpacksampletable when decoding a crafted deep tiled EXR file bsc1276428. - CVE-2026-59184: out-of-bounds or use-after-free writes when processing...

7.1CVSS6.3AI score0.00423EPSS
SaveExploits0References22
Kitploit
Kitploit
•added 2026/09/01 5:25 p.m.•21 views

TrustTunnel v1.1.0

Clients · App Store iOS · App Store macOS · Play store Table of Contents Introduction Server Features Client Features Quick start Endpoint setup Install the endpoint Updating the endpoint Endpoint configuration wizard Let's Encrypt certificate lifecycle Running endpoint Export client configuratio...

6.2AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/01 5:17 a.m.•19 views

nDPI v6.0

nDPI What is nDPI ? nDPI® is an open source LGPLv3 library for deep-packet inspection. A generic FAQ about nDPI is available here How To Compile nDPI In order to compile this project do ./autogen.sh && ./configure make If you get some errors while compiling croaring.c, try: ./autogen.sh &&...

6AI score
SaveExploits0References5
F5 Networks
F5 Networks
•added 2026/08/31 3:03 p.m.•41 views

K000163139: NLnet Labs Unbound vulnerability CVE-2026-33278

Security Advisory Description NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execution as a result of deep copying a data structure and erroneously overwriting a destination pointer. ...

10CVSS7.8AI score0.01133EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
•added 2026/08/31 10:07 a.m.•15 views

CVE-2026-19873 HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements

HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has countername set, its process method reads the repeat count from the named query string parameter, checks only that it is ...

5.8AI score0.00517EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/31 10:07 a.m.•37 views

CVE-2026-19873

The HTML::FormFu Perl module (versions through 2.08 ) is vulnerable to a resource exhaustion attack (Denial of Service) due to an unbounded repeat count in Repeatable elements. When counter_name is set, the process() method reads a count from the query string and deep-clones the child subtree for...

7.5CVSS5.8AI score0.00517EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2026/08/31 10:07 a.m.•16 views

CVE-2026-19873

HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has countername set, its process method reads the repeat count from the named query string parameter, checks only that it is ...

7.5CVSS5.8AI score0.00517EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/31 12:00 a.m.•4 views

CVE-2026-19873: Improper Validation of Specified Quantity in Input

HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has countername set, its process method reads the repeat count from the named query string parameter, checks only that it is ...

7.5CVSS5.8AI score0.00517EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/28 5:12 a.m.•10 views

ROOT-APP-NPM-CVE-2021-26707 CVE-2021-26707 in merge-deep - Patched by Root

Root has patched CVE-2021-26707 in the merge-deep package for Root:npm. Multiple fixed versions available...

9.8CVSS7.8AI score0.01901EPSS
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/08/28 12:00 a.m.•8 views

REPLICANT: Learning Policies for Evading and Hardening Malware Detectors

To determine the real-world effectiveness of machine learning based malware detection, it is vital to evaluate its robustness against highly capable adversaries. However, state-of-the-art attacks do not effectively model realistic adversaries, as they often assume access to privileged information...

5.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-16440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault. CVE-2026-16440 Note that Nessus relies ...

5.7CVSS5.6AI score0.00235EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-59982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11,...

7.1CVSS5.8AI score0.00423EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2026-59187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.3.0 through...

7.1CVSS5.9AI score0.00402EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•24 views

Linux Distros Unpatched Vulnerability : CVE-2026-59983

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11,...

5.5CVSS6.1AI score0.00172EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/08/27 2:51 p.m.•8 views

Unchecked Input for Loop Condition

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via the FeatStructReader in nltk/featstruct.py. An attacker can trigger an unhandled RecursionError and cras...

8.7CVSS7.2AI score0.00456EPSS
SaveExploits1References2
Rows per page
Query Builder