452053 matches found
langflow-CVE-2026-17633-PoC
CVE-2026-17633 & CVE-2026-17632 — IBM Langflow OSS RCE 教育目的のみ。所有しているシステム、またはテストに対する明示的な書面による許可を得ているシステムに対してのみ使用してください。 1. はじめに Langflowとは...
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
An attacker used stolen passwords of staff at France's tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June and July. Neither the tax administration nor France's national cybersecurity agency saw the data leave. The attack was not sophisticated, the...
EUVD-2026-89181
hey, nxsnmputilityobjectidget in the NetX Duo SNMP addon does not validate the claimed OID data length against the actual buffer size when the OID uses BER multibyte length encoding, so a remote attacker can send a crafted SNMP packet with a multibyte OID length larger than the available buffer,...
CVE-2026-102718
hey, nxsnmputilityobjectidget in the NetX Duo SNMP addon does not validate the claimed OID data length against the actual buffer size when the OID uses BER multibyte length encoding, so a remote attacker can send a crafted SNMP packet with a multibyte OID length larger than the available buffer,...
CVE-2026-102718
hey, nxsnmputilityobjectidget in the NetX Duo SNMP addon does not validate the claimed OID data length against the actual buffer size when the OID uses BER multibyte length encoding, so a remote attacker can send a crafted SNMP packet with a multibyte OID length larger than the available buffer,...
CVE-2026-102718
The NetX Duo SNMP addon contains a vulnerability in the _nx_snmp_utility_object_id_get function. The component fails to validate the claimed OID data length against the actual buffer size when using BER multibyte length encoding . A remote attacker can send a crafted SNMP packet with an OID lengt...
CVE-2026-102718
hey, nxsnmputilityobjectidget in the NetX Duo SNMP addon does not validate the claimed OID data length against the actual buffer size when the OID uses BER multibyte length encoding, so a remote attacker can send a crafted SNMP packet with a multibyte OID length larger than the available buffer,...
CVE-2026-44351-poc
CVE-2026-44351 — 空のSecretによるJWT偽造 fast-jwt fast-jwt 6.2.4より前のバージョン における認証バイパス auth bypass のPoC。 これにより、未認証の攻撃者が任意のJWTを偽造し、標的アプリケーションによって 正規のものとして受け入れさせることができる。 | ---|--- CVE| CVE-2026-44351 Advisory| GHSA-gmvf-9v4p-v8jc CWE| CWE-1391 鍵の不適切な検証 / CWE-287 不適切な認証 / CWE-326 不十分な暗号強度 CVSS 3.1| 9.1...
CVE-2026-102715 mDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packet
Any host on the LAN can send two mDNS records and make the responder write past the end of its transmit packet. The string table stores each name in a slot rounded up to a multiple of four: c / addons/mdns/nxdmdns.c:11436, 11443, 11447 / memorylen = memorylen & 0xFFFFFFFC + 8 & 0xFFFFFFFF; ... le...
EUVD-2026-89178
Any host on the LAN can send two mDNS records and make the responder write past the end of its transmit packet. The string table stores each name in a slot rounded up to a multiple of four: c / addons/mdns/nxdmdns.c:11436, 11443, 11447 / memorylen = memorylen & 0xFFFFFFFC + 8 & 0xFFFFFFFF; ... le...
CVE-2026-102715 mDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packet
Any host on the LAN can send two mDNS records and make the responder write past the end of its transmit packet. The string table stores each name in a slot rounded up to a multiple of four: c / addons/mdns/nxdmdns.c:11436, 11443, 11447 / memorylen = memorylen & 0xFFFFFFFC + 8 & 0xFFFFFFFF; ... le...
CVE-2026-102715 mDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packet
Any host on the LAN can send two mDNS records and make the responder write past the end of its transmit packet. The string table stores each name in a slot rounded up to a multiple of four: c / addons/mdns/nxdmdns.c:11436, 11443, 11447 / memorylen = memorylen & 0xFFFFFFFC + 8 & 0xFFFFFFFF; ... le...
CVE-2026-102715
A heap-buffer overflow vulnerability exists in the mDNS implementation within NetX Duo (specifically in addons/mdns/nxd_mdns.c). The root cause is a logic error where the string cache lookup compares the rounded slot size rather than the actual string length . This allows names with lengths of 12...
EUVD-2026-89177
nxicmpv6validateoptions scans the option area with while length 2 common/src/nxicmpv6validateoptions.c:79. An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns NXSUCCESS. Its zero-length rejection never...
CVE-2026-102714
nxicmpv6validateoptions scans the option area with while length 2 common/src/nxicmpv6validateoptions.c:79. An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns NXSUCCESS. Its zero-length rejection never...
CVE-2026-102714
nxicmpv6validateoptions scans the option area with while length 2 common/src/nxicmpv6validateoptions.c:79. An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns NXSUCCESS. Its zero-length rejection never...
CVE-2026-102714
nxicmpv6validateoptions scans the option area with while length 2 common/src/nxicmpv6validateoptions.c:79. An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns NXSUCCESS. Its zero-length rejection never...
CVE-2026-102714
The Netxduo stack is vulnerable to a memory safety issue in the _nx_icmpv6_validate_options() function within common/src/nx_icmpv6_validate_options.c. The function fails to adequately validate the tail of an ICMPv6 option area, leaving a one- or two-byte residue unexamined while returning NX_SUCC...
key-transparency-auditor
key-transparency-auditor Signal のキー透過性サービス向けのサードパーティ監査人の参照実装です。キー透過性 仕様に基づいています。 概要 このサービスは Java で書かれており、Micronaut フレームワークを使用しています。ビルドとユニットテストを行うには、ルートディレクトリで ./mvnw clean test を実行してください。 メインクラスは Auditor で、キー透過性サービスから更新のストリームを要求するスケジュールジョブを実行します。これは、キー透過性サービスの プレフィックスツリー と ログツリー...
