11120 matches found
CVE-2019-25466
Easy File Sharing Web Server 7.2 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by creating a malicious username. Attackers can craft a username with a payload containing 4059 bytes of padding followed by a nseh...
CVE-2019-25466
CVE-2019-25466 affects Easy File Sharing Web Server 7.2. A local structured exception handling (SEH) buffer overflow arises in the process of adding a new user account, triggered by a crafted username containing 4059 bytes of padding followed by an NSEH/SEH pointer. The vulnerability enables a lo...
CVE-2019-25466 Easy File Sharing Web Server 7.2 Local SEH Overflow
Easy File Sharing Web Server 7.2 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by creating a malicious username. Attackers can craft a username with a payload containing 4059 bytes of padding followed by a nseh...
CVE-2026-31870 cpp-httplib Affected by Remote Process Crash via Malformed Content-Length Response Header
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.37.1, when a cpp-httplib client uses the streaming API httplib::stream::Get, httplib::stream::Post, etc., the library calls std::stoull directly on the Content-Length header value received from the server...
kernel: x86/tdx: Fix "in-kernel MMIO" check
A flaw was found in the Linux kernel. Userspace can deceive the kernel into performing MMIO Memory-Mapped IO operations in TDX Trust Domain Extensions on its behalf, allowing a VE Virtualization Exception to be incorrectly handled as a in-kernel MMIO operation...
PT-2026-24764
Easy File Sharing Web Server 7.2 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by creating a malicious username. Attackers can craft a username with a payload containing 4059 bytes of padding followed by a nseh...
PT-2026-24765
Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized alphanumeric encoded payload in the User Password or Master Password fields. Attackers can craft a malicious payload with...
PT-2026-24759
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.37.1, when a cpp-httplib client uses the streaming API httplib::stream::Get, httplib::stream::Post, etc., the library calls std::stoull directly on the Content-Length header value received from the server...
apache-poi:POIFileHandlerFuzzer: Security exception in org.apache.poi.hemf.record.emf.HemfDraw$EmfPolyDraw.init
Detailed Report: https://oss-fuzz.com/testcase?key=6368629896839168 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIFileHandlerFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
Detailed Report: https://oss-fuzz.com/testcase?key=5129334196338688 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
GO-2026-4621 OliveTin has crash on NPE by calling APIs with invalid bindings or log references in github.com/OliveTin/OliveTin
OliveTin has crash on NPE by calling APIs with invalid bindings or log references in github.com/OliveTin/OliveTin...
The vulnerability of the mm component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the mm component in the Linux operating system’s kernel is related to incorrect handling of exceptional conditions. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the svm_vcpu_pre_run() function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the svmvcpuprerun function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to insufficient checking of exception states. Exploiting this vulnerability could allow an attacker to compromise the...
archaius-core:DynamicPropertyFuzzer: Security exception in java.base/java.util.Arrays.copyOf
Detailed Report: https://oss-fuzz.com/testcase?key=4840355240673280 Project: archaius-core Fuzzing Engine: libFuzzer Fuzz Target: DynamicPropertyFuzzer Job Type: libfuzzerasanarchaius-core Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
kernel: x86/tdx: Fix "in-kernel MMIO" check
A flaw was found in the Linux kernel. Userspace can deceive the kernel into performing MMIO Memory-Mapped IO operations in TDX Trust Domain Extensions on its behalf, allowing a VE Virtualization Exception to be incorrectly handled as a in-kernel MMIO operation...
OSV-2026-370 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=490658507 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.lang.System$2.encodeASCII java.base/sun.nio.cs.UTF8$Encoder.encodeArrayLoop...
Exiv2: Multiple Vulnerabilities
Background Exiv2 is a C++ library and set of tools for parsing, editing and saving Exif and IPTC metadata from images. Description The following vulnerabilities have been discovered in Exiv2: 2 out of bounds reads, an integer overflow, and an uncaught exception. The worst of which can lead to a...
GLSA-202603-01 : Exiv2: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202603-01 Exiv2: Multiple Vulnerabilities The following vulnerabilities have been discovered in Exiv2: 2 out of bounds reads, an integer overflow, and an uncaught exception. The worst of which can lead to a Denial of Service via a...
CVE-2026-3726
CVE-2026-3726 affects Tenda F453 1.0.0.3. A stack-based buffer overflow exists in the fromwebExcptypemanFilter function located in /goform/webExcptypemanFilter, triggered by manipulating the page argument. The issue can be exploited remotely and the exploit has been publicly disclosed. There is n...
checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
Detailed Report: https://oss-fuzz.com/testcase?key=5193079262085120 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...