OSV-2026-666 Heap-use-after-free in insertkey

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=508107730 Crash type: Heap-use-after-free READ 1 Crash state: insertkey luaHresize luaHnewkey...

OSV-2026-659 Heap-buffer-overflow in ___interceptor_strncpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=507904196 Crash type: Heap-buffer-overflow WRITE Crash state: interceptorstrncpy concathashstring ndpisearchsshtcp...

kimageformats:kimgio_jxr_fuzzer: Use-of-uninitialized-value in ReadWMIHeader

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5913736901885952 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiojxrfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libheif:encoder_fuzzer: Global-buffer-overflow in svt_aom_get_blk_var_map

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5042418566365184 Project: libheif Fuzzing Engine: afl Fuzz Target: encoderfuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x5988b570c04...

graphicsmagick:coder_HEIF_fuzzer: Heap-buffer-overflow in JPEG2000MainHeader::parse_SIZ_segment

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6361612268404736 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderHEIFfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

lua:luaL_loadstring_test: Heap-use-after-free in insertkey

Detailed Report: https://oss-fuzz.com/testcase?key=6274756486955008 Project: lua Fuzzing Engine: libFuzzer Fuzz Target: luaLloadstringtest Job Type: libfuzzerasani386lua Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0xcc338f84 Crash State: insertkey luaHresize luaHnewke...

Command Injection

Overview @burtthecoder/mcp-dnstwist is a MCP server for dnstwist - DNS fuzzing to detect typosquatting, phishing and corporate espionage Affected versions of this package are vulnerable to Command Injection via the fuzzdomain MCP tool. An attacker can execute arbitrary operating system commands b...

CVE-2026-7443 BurtTheCoder mcp-dnstwist MCP index.ts fuzz_domain os command injection

A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this vulnerability is the function fuzzdomain of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument Request can lead to os command injection. The attack may be launched...

CVE-2026-7443 BurtTheCoder mcp-dnstwist MCP index.ts fuzz_domain os command injection

A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this vulnerability is the function fuzzdomain of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument Request can lead to os command injection. The attack may be launched...

CVE-2026-7443

CVE-2026-7443 affects BurtTheCoder mcp-dnstwist ≤ 1.0.4, specifically the fuzz_domain function in src/index.ts of the MCP Interface. The weakness permits remote execution of OS commands via manipulation of the Request argument. Exploitation is possible remotely and public exploits exist. The vuln...

CVE-2026-7443

A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this vulnerability is the function fuzzdomain of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument Request can lead to os command injection. The attack may be launched...

EUVD-2026-26300

A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this vulnerability is the function fuzzdomain of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument Request can lead to os command injection. The attack may be launched...

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in decoder_context::decode_slice_unit_tiles

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5223300442947584 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderheicfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

OSV-2026-649 Container-overflow in OGRGeometryFactory::organizePolygons

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=506932597 Crash type: Container-overflow WRITE 1 Crash state: OGRGeometryFactory::organizePolygons OGRCreateFromShapeBin OpenFileGDB::FileGDBOGRGeometryConverterImpl::CreateCurveGeometry...

OSV-2026-646 Heap-buffer-overflow in sentencepiece::unigram::Model::EncodeOptimized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=507169860 Crash type: Heap-buffer-overflow READ 8 Crash state: sentencepiece::unigram::Model::EncodeOptimized sentencepiece::unigram::Model::Encode sentencepiece::SentencePieceProcessor::Encode...

DNStwist MCP Server 命令注入漏洞

DNStwist MCP Server is a domain name security detection tool developed by Burt personally. Versions of DNStwist MCP Server 1.0.4 and earlier contained a command injection vulnerability. This vulnerability stemmed from the fuzzdomain function in the src/index.ts file, where the Request operation o...

PT-2026-36023

A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this vulnerability is the function fuzz domain of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument Request can lead to os command injection. The attack may be launche...

sentencepiece:model_load_fuzzer: Heap-buffer-overflow in sentencepiece::unigram::Model::EncodeOptimized

Project: https://github.com/google/sentencepiece.git Detailed Report: https://oss-fuzz.com/testcase?key=4785445505662976 Project: sentencepiece Fuzzing Engine: libFuzzer Fuzz Target: modelloadfuzzer Job Type: libfuzzerasansentencepiece Platform Id: linux Crash Type: Heap-buffer-overflow READ 8...

matio:matio_fuzzer: Use-of-uninitialized-value in Mat_int32Swap

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6315263732809728 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-val...

vlc:vlc-demux-dec-libfuzzer-mkv: Heap-buffer-overflow in Read

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5134971554824192 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mkv Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x74de560f7741...