69109 matches found
Distributed Point Functions and Function Secret Sharing
A distributed point function DPF is a cryptographic primitive that enables compressed additive sharing of a secret weight-1 vector equivalently, a point function across two or more parties. The appealing lightweight structure of DPF constructions has enabled a wide range of applications. These...
EUVD-2026-51328
An issue in dnsmgr v.2.15 and before allows a local attacker to execute arbitrary code via the ping function of the CheckUils.php file...
(Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability
This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CharxModbusServer, which listens on...
(Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability
This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CharxModbusServer, which listens on...
PT-2026-66527
SQLite 3.41 is vulnerable to use after free in the jsonExtractFunc function. Premature release of parsed JSON object memory leads to subsequent illegal access of freed pointer. Remote attackers can trigger this flaw via specially crafted SQL queries, resulting in service crash and sensitive memor...
CVE-2026-51291
...
CVE-2026-51294
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
EUVD-2026-51252
SQLite 3.41 is vulnerable to use after free in the jsonArrayLengthFunc function...
PT-2026-66526
SQLite 3.41 is vulnerable to use after free in the jsonArrayLengthFunc function...
PT-2026-66445
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the assets function...
CVE-2026-67435 linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirect
linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 6.0.0, lib.url.fetch followed cross-origin redirects while forwarding caller-supplied credential headers other than Authorization and Cookie, allowing a malicious...
CVE-2026-40272
Improper Input Validation in the decode function of the traceparser library could allow an attacker with a corrupted kernel trace event log .kev file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets...
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...
EUVD-2026-50441
Improper Input Validation in the decode function of the traceparser library could allow an attacker with a corrupted kernel trace event log .kev file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets...
CVE-2026-40272
CVE-2026-40272 involves an improper input validation in the decode() function of the traceparser library. The issue affects processes that use libtraceparser on QNX hosts/targets and can be triggered by a corrupted kernel trace event log (.kev) file. The underlying consequence is the potential ex...
CVE-2026-64558
In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in pkeypckmo handler implementation Explicitly check the length of the target buffer in the pkeypckmo implementation of the keytoprotkey handler function. The handler function fails, if the generated outpu...
CVE-2026-67192
Xlight FTP Server before 3.9.5 contains a pre-authentication stack buffer overflow vulnerability that allows unauthenticated attackers to corrupt stack memory by sending malformed SSH packets when a GCM cipher is negotiated. Attackers can craft packets with an unvalidated length field passed...
GHSA-28WG-GHJ8-5HJV nanoid: non-secure generators can loop indefinitely with negative size
nanoid Nano ID before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning...