65443 matches found
CVE-2026-3392 FascinatedBox lily lily_emitter.c eval_tree null pointer dereference
A weakness has been identified in FascinatedBox lily up to 2.3. The affected element is the function evaltree of the file src/lilyemitter.c. This manipulation causes null pointer dereference. The attack is restricted to local execution. The exploit has been made available to the public and could ...
CVE-2026-3392
FascinatedBox lily up to 2.3 is affected by CVE-2026-3392. The flaw lies in the eval_tree function of src/lily_emitter.c, where manipulation leads to a null pointer dereference. Exploitation is restricted to local execution, and a public exploit has been made available. The project was informed v...
CVE-2026-3388
A vulnerability was found in Squirrel up to 3.2. This affects the function SQCompiler::Factor/SQCompiler::UnaryOP of the file squirrel/sqcompiler.cpp. Performing a manipulation results in uncontrolled recursion. The attack needs to be approached locally. The exploit has been made public and could...
EUVD-2026-9125
A vulnerability was identified in FascinatedBox lily up to 2.3. This issue affects the function patchlineend of the file src/lilybuilderror.c of the component Error Reporting. The manipulation leads to out-of-bounds read. The attack can only be performed from a local environment. The exploit is...
CVE-2026-3389
A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstdrexnewnode in the library sqstdlib/sqstdrex.cpp. Executing a manipulation can lead to null pointer dereference. The attack can only be executed locally. The exploit has been publicly disclosed and m...
CVE-2026-3386 wren-lang wren wren_compiler.c emitOp out-of-bounds
A flaw has been found in wren-lang wren up to 0.4.0. Affected by this vulnerability is the function emitOp of the file src/vm/wrencompiler.c. This manipulation causes out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been published and may be used. The...
CVE-2026-3386 wren-lang wren wren_compiler.c emitOp out-of-bounds
A flaw has been found in wren-lang wren up to 0.4.0. Affected by this vulnerability is the function emitOp of the file src/vm/wrencompiler.c. This manipulation causes out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been published and may be used. The...
CVE-2026-3385
A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wrencompiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the...
CVE-2026-3384
A security vulnerability has been detected in ChaiScript up to 6.1.0. This impacts the function chaiscript::eval::ASTNodeImpl::eval/chaiscript::eval::FunctionPushPop of the file include/chaiscript/language/chaiscripteval.hpp. The manipulation leads to uncontrolled recursion. An attack has to be...
CVE-2026-3382
The CVE concerns ChaiScript up to 6.1.0, specifically the function chaiscript::Boxed_Number::get_as in include/chaiscript/dispatchkit/boxed_number.hpp. A manipulation can lead to memory corruption, with a local attack vector. The exploit has been released publicly and the issue was reported early...
Exploit for CVE-2026-36670
CVE-2026-36670 A time-based blind SQL injection exploit for t...
CVE-2026-3378 Tenda F453 qossetting fromqossetting buffer overflow
A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the argument qos can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...
CVE-2026-3378
CVE-2026-3378 affects Tenda F453 1.0.0.3. The vulnerability lies in the qossetting handling in /goform/qossetting, where manipulating the qos argument can cause a buffer overflow. This can be exploited remotely, and the exploit has been published and may be used. The available documents do not sp...
AWE: Adaptive Agents for Dynamic Web Penetration Testing
Modern web applications are increasingly produced through AI-assisted development and rapid no-code deployment pipelines, widening the gap between accelerating software velocity and the limited adaptability of existing security tooling. Pattern-driven scanners fail to reason about novel contexts,...
ASB-A-483074175
In multiple locations, there is a possible way to access unexpected data due to multiple causes. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-22498
Name of the Vulnerable Software and Affected Versions Tenda F453 version 1.0.0.3 Description A flaw exists in the fromqossetting function of the /goform/qossetting file. Manipulation of the qos argument can lead to a buffer overflow. The attack can be launched remotely. Recommendations Update to ...
PUB-A-438245439
In dhdtcpdatainfoget of dhdip.c, there is a possible Denial of Service due to a precondition check failure. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-3286
A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...
CVE-2026-3302
A weakness has been identified in SourceCodester Doctor Appointment System 1.0. Affected by this issue is some unknown functionality of the file /register.php of the component Sign Up Page. Executing a manipulation of the argument Email can lead to cross site scripting. The attack can be launched...