Lucene search
+L

1592 matches found

OSV
OSV
added 2025/10/10 12:15 p.m.2 views

DEBIAN-CVE-2025-11579

github.com/nwaples/rardecode versions =2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash...

6.5CVSS8.4AI score0.00349EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/10 12:15 p.m.9 views

UBUNTU-CVE-2025-11579

github.com/nwaples/rardecode versions =2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash...

6.5CVSS7.2AI score0.00349EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/10/10 11:15 a.m.10 views

CVE-2025-11579 DoS via Out Of Memory Crash

github.com/nwaples/rardecode versions =2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash...

5.3CVSS0.00349EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2025/10/10 11:15 a.m.8 views

CVE-2025-11579

github.com/nwaples/rardecode versions =2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash...

6.5CVSS8.4AI score0.00349EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2025/10/10 11:15 a.m.2 views

CVE-2025-11579 DoS via Out Of Memory Crash

github.com/nwaples/rardecode versions =2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash...

5.3CVSS6AI score0.00349EPSS
SaveExploits1References1
CVE
CVE
added 2025/10/10 11:15 a.m.26 views

CVE-2025-11579

CVE-2025-11579 affects github.com/nwaples/rardecode, versions

6.5CVSS6AI score0.00349EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/10 12:0 a.m.5 views

PT-2025-41556

Name of the Vulnerable Software and Affected Versions rardecode versions 2.1.1 and earlier Description The software does not properly limit the dictionary size when processing RAR files. An attacker can exploit this by providing a specially crafted RAR file with a large dictionary size, leading t...

6.5CVSS7.1AI score0.00349EPSS
SaveExploits1
CNNVD
CNNVD
added 2025/10/10 12:0 a.m.6 views

rardecode 安全漏洞

rardecode is a golang package for reading RAR files by the individual developer Nicholas Waples. A security vulnerability exists in rardecode 2.1.1 and earlier versions, which stems from an unrestricted dictionary size, which allows an attacker to supply a specially crafted RAR file resulting in ...

5.3CVSS6.3AI score0.00349EPSS
SaveExploits1References3
GithubExploit
GithubExploit
added 2025/10/08 9:18 p.m.229 views

Exploit for CVE-2025-57833

CVE-2025-57833 Example Vulnerable application for CVE-2025–57...

7.1CVSS8.1AI score0.15656EPSS
SaveExploits4
RedHat Linux
RedHat Linux
added 2025/10/08 7:24 p.m.4 views

django: Django SQL injection in FilteredRelation column aliases

An SQL injection flaw has been discovered in the Django web framework. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the kwargs passed QuerySet.annotate or QuerySet.alias...

8.1CVSS7.3AI score0.15656EPSS
SaveExploits4References7
RedHat Linux
RedHat Linux
added 2025/10/08 7:6 p.m.6 views

django: Django SQL injection in FilteredRelation column aliases

An SQL injection flaw has been discovered in the Django web framework. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the kwargs passed QuerySet.annotate or QuerySet.alias...

8.1CVSS7.3AI score0.15656EPSS
SaveExploits4References7
OSV
OSV
added 2025/10/08 8:40 a.m.1 views

BIT-DJANGO-2025-59681

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...

9.8CVSS8AI score0.00583EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-16895

Malware in sbrugna...

7.8CVSS7.6AI score0.00403EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2008-5771

Malware in sbrugna...

10CVSS6.4AI score0.02465EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2014-7645

Malware in sbrugna...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2006-1869

Malware in sbrugna...

10CVSS6.4AI score0.07014EPSS
SaveExploits1References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2019-11115

Malware in sbrugna...

5.4CVSS5.6AI score0.00121EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2006-6664

Malware in sbrugna...

7.5CVSS6.4AI score0.01473EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2009-2256

Malware in sbrugna...

5CVSS6.1AI score0.02086EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2013-7226

Malware in sbrugna...

8.1CVSS8.2AI score0.0168EPSS
SaveExploits1References2
Rows per page
Query Builder