CVE-2026-94083

Suricata before 8.0.7 is affected by a DoH2 type confusion vulnerability. When a DoH2 request includes an HTTP/1 to HTTP/2 upgrade, the HTTP/2 state cleanup code is executed even though the actual connection state is HTTP/1, leading to an invalid free . The issue requires app-layer.protocols.doh2...

Apache PDFBox 3.0.8 Flate PNG Predictor Disproportionate Heap Allocation DoS

Summary The Apache PDFBox library is an open source Java tool for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command-line utilities...

CVE-2026-94083: Access of Resource Using Incompatible Type

Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is HTTP1 when there is a DoH2 request with an HTTP1 to HTTP2 upgrade. This requires app-layer.protocols.doh2 to be enabled, which is th...

Linux Distros Unpatched Vulnerability : CVE-2026-94055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free. CVE-2026-94055 Note that Nessus relies on the presence of...

OPENSUSE-SU-2026:21882-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276722. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on...

CVE-2022-26937

Windows ネットワークファイルシステム クラッシュ PoC CVE-2022-26937 root@kitploit: nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical data...

CVE-2025-34226

CVE-2025-34226: OpenPLC Runtimeにおける持続的DoS 脆弱性概要 フィールド| 値 ---|--- CVE ID| CVE-2025-34226 影響を受けるバージョン| OpenPLC Runtime V3 修正バージョン| コミット 095ee09623dd229b64ad3a1db38a901a3772f6fc 深刻度| 高 CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N 7.1 高 CWE| CWE-664...

CVE-2020-8158

CVE-2020-8158：TypeORM 原型污染漏洞 概述 这是一个概念验证（PoC），演示了 CVE-2020-8158，即 TypeORM 0.2.25 以下版本中存在的一个严重原型污染漏洞。 漏洞详情 CVE ID ：CVE-2020-8158 CVSS 评分 ：9.8（严重） 受影响软件包 ：TypeORM = 0.2.25） package.json - 依赖项 设置说明 有关详细的设置和漏洞利用说明，请参阅 SETUP.md。 缓解措施 将 TypeORM 升级到 0.2.25 或更高版本 验证并清理所有用户输入 使用输入验证库来阻止原型污染尝试 考虑对关键对象使用...

TKEY-remote-DoS-vulnerability-exploit

TKEY-remote-DoS-vulnerability-exploit CVE-2015-5477 POC のエクスプロイトコード...

CVE-2026-67184-Unauthenticated-NULL-Pointer-Dereference-Crashes-the-Server-TinyWeb-

セキュリティアドバイザリ: 未認証の NULL ポインタ参照がサーバをクラッシュさせる TinyWeb 割り当て済み CVE ID: CVE-2026-67184 概要 TinyWeb がリクエストラインのパースに失敗すると、エラーを返しますが、リクエストの URL ポインタを NULL に設定したままにします。呼び出し元はエラーを無視してリクエストをレスポンスビルダーに渡すため、ビルダーがその NULL ポインタを参照してワーカーがクラッシュします。少数の不正なリクエストでサーバ全体がダウンし、復旧しません。 影響を受けるソフトウェア Project: TinyWeb...

DEBIAN-CVE-2026-82560

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...

CVE-2026-82560

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...

AZL-103320 CVE-2026-82560 affecting package perl 5.38.2-516

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...

UBUNTU-CVE-2026-82560

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...

CVE-2026-82560

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...

CVE-2024-27088

CVE-2024-27088 취약점 개요 CVE-2024-27088 Feb 26, 2024 ReDoS in node.js package rebob 프로젝트의 일환 취약점 설명 github advisories root@kitploit: /^\sfunction\s\0-'-\uffff+\s\0--\uffff\s/ This vulnerability can be exploited when there is an imbalance in parentheses, which results in excessive backtracking and...

CVE-2025-66676

CVE-2025-66676 IOBit Unlocker 1.3.0.11 およびそれ以前のバージョンにおいて、アプリケーションはファイルのロック解除を試みることで任意のプロセスを終了させることができます。 背景 このアプリケーションは、ロックされたファイルを解除するために使用されます。実行中のプロセスのプロセスイメージファイルをロックされたファイルとして指定することで、IOBit Unlocker...

CVE-2026-82560

The Pod::Text component in Perl (versions before 6.1.1 ) is vulnerable to CPU and memory exhaustion when formatting a POD document. The root cause is that nested =over tags can drive the margin to equal the output width; at this point, the wrap() function's line-splitting substitution matches an ...

CVE-2026-82560 Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...

CVE-2026-82560 Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...