CVE-2026-66749-Unchecked-Room-Lookup-Leads-to-Server-Crash-Let-s-Chat-

Бюллетень безопасности: непроверенный поиск комнаты приводит к падению сервера Let's Chat Присвоенный идентификатор CVE: CVE-2026-66749 Сводка Один HTTP-запрос от любой учётной записи останавливает процесс сервера Let's Chat. GET /messages принимает параметр room, ищет комнату по id и затем...

CVE-2023-30547

CVE-2023-30547 vm2 est un bac à sable qui permet d'exécuter du code non fiable avec les modules intégrés de Node.js en liste blanche. Il existe une vulnérabilité dans l'assainissement des exceptions de vm2 pour les versions jusqu'à 3.9.16, permettant aux attaquants de déclencher une exception hôt...

DEBIAN-CVE-2026-102279

Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APPDEBUG=true pass attacker-controlled input to a Tippy.js tooltip configured with allowHTML true, enabling DOM-based cross-site scripting when a user hovers over the tooltip. This issue is...

CVE-2026-102279 Laravel: XSS in Debug Page Information

Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APPDEBUG=true pass attacker-controlled input to a Tippy.js tooltip configured with allowHTML true, enabling DOM-based cross-site scripting when a user hovers over the tooltip. This issue is...

CVE-2026-102279 Laravel: XSS in Debug Page Information

Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APPDEBUG=true pass attacker-controlled input to a Tippy.js tooltip configured with allowHTML true, enabling DOM-based cross-site scripting when a user hovers over the tooltip. This issue is...

CVE-2026-102279

The Laravel web application framework is vulnerable to DOM-based cross-site scripting (XSS) in versions prior to 12.69.0 and 13.30.0 . When APP_DEBUG=true , the exception debug pages pass attacker-controlled input to a Tippy.js tooltip with allowHTML set to true. This allows an attacker to execut...

CVE-2026-102279

Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APPDEBUG=true pass attacker-controlled input to a Tippy.js tooltip configured with allowHTML true, enabling DOM-based cross-site scripting when a user hovers over the tooltip. This issue is...

CVE-2026-101101

A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the file legacy/convert.ts of the component Middleware. The manipulation leads to uncaught exception. Remote exploitation of the attack is possible. Upgrading to version 2026-09-...

CVE-2026-101901

A flaw was found in Axios. A remote attacker or an unresponsive endpoint can cause a Denial of Service DoS by triggering an error during HTTP/2 session initialization or reuse. Because the underlying session fails to register proper error handlers, network or session failures result in an uncaugh...

CVE-2026-101101 ag-ui-protocol ag-ui Middleware convert.ts JSON.parse uncaught exception

A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the file legacy/convert.ts of the component Middleware. The manipulation leads to uncaught exception. Remote exploitation of the attack is possible. Upgrading to version 2026-09-...

CVE-2026-101101

The ag-ui-protocol ag-ui software (versions up to 2026-09-07 ) contains a vulnerability in the Middleware component. Specifically, the JSON.parse function within the legacy/convert.ts file can be manipulated to trigger an uncaught exception . This issue is susceptible to remote exploitation . To ...

CVE-2026-101101 ag-ui-protocol ag-ui Middleware convert.ts JSON.parse uncaught exception

A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the file legacy/convert.ts of the component Middleware. The manipulation leads to uncaught exception. Remote exploitation of the attack is possible. Upgrading to version 2026-09-...

EUVD-2026-88393

A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the file legacy/convert.ts of the component Middleware. The manipulation leads to uncaught exception. Remote exploitation of the attack is possible. Upgrading to version 2026-09-...

CVE-2017-5638

CVE-2017-5638 | Struts s2-045 Description Il est possible d'effectuer une attaque RCE avec une valeur Content-Type malveillante. Si la valeur Content-Type n'est pas valide, une exception est levée qui est ensuite utilisée pour afficher un message d'erreur à l'utilisateur. Versions affectées Strut...

CVE-2026-101035

A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component nr-gnb. Executing a manipulation can lead to uncaught exception. The attack can be launched remotely. The exploit has been published and ma...

EUVD-2026-88204

A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component nr-gnb. Executing a manipulation can lead to uncaught exception. The attack can be launched remotely. The exploit has been published and ma...

CVE-2026-101035 aligungr UERANSIM nr-gnb encode.cpp DecodePlainMmMessage uncaught exception

A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component nr-gnb. Executing a manipulation can lead to uncaught exception. The attack can be launched remotely. The exploit has been published and ma...

CVE-2026-101035 aligungr UERANSIM nr-gnb encode.cpp DecodePlainMmMessage uncaught exception

A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component nr-gnb. Executing a manipulation can lead to uncaught exception. The attack can be launched remotely. The exploit has been published and ma...

CVE-2026-101035 aligungr UERANSIM nr-gnb encode.cpp DecodePlainMmMessage uncaught exception

A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component nr-gnb. Executing a manipulation can lead to uncaught exception. The attack can be launched remotely. The exploit has been published and ma...

CVE-2026-101035

A flaw in aligungr UERANSIM (up to version 3.3.0) allows a remote attacker to trigger an uncaught exception . The vulnerability exists in the DecodePlainMmMessage function within the src/lib/nas/encode.cpp file of the nr-gnb component. An exploit has been published and may be used in the wild. Re...