ScratchABit

ScratchABit ScratchABit is an interactive incremental disassembler with data/control flow analysis capabilities. ScratchABit is dedicated to the efforts of the OpenSource reverse engineering community reverse engineering to produce OpenSource drivers/firmware for hardware not properly supported b...

phpstan

PHPStan - PHP Static Analysis Tool PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves PHP closer to compiled languages in the sense that the correctness of each line of the code can be...

pgbackrest

pgBackRest Reliable PostgreSQL Backup & Restore Introduction pgBackRest is a reliable backup and restore solution for PostgreSQL that seamlessly scales up to the largest databases and workloads. pgBackRest v2.60.0 is the current stable release. Release notes are on the Releases page. Please give ...

cvedb

CVEdb CVEdb is yet another Python CVE database library and utility. There are lots already available. Why create another? Most existing libraries rely on a third party API like cve.circl.lu, which can and do throttle usage, require registration, and/or demand an internet connection. Some librarie...

telegram-history-dump

telegram-history-dump This utility is the successor of telegram-json-backup, written from the ground up in Ruby. It can create backups of your Telegram user and supergroup dialogs using telegram-cli's remote control feature. Compared to the old project, telegram-history-dump: Has better support f...

libvmdk

libvmdk is a library to access the VMware Virtual Disk VMDK format. Project information: Status: alpha Licence: LGPL-3.0-or-later Read supported extent file formats: RAW flat COWD version 1 sparse VMDK version 1, 2 and 3 sparse Supported VMDK format features: delta links grain compression as of...

cve-2026-75604

CVE-2026-75604 - Next.js path traversal → RCE Windows · research lab Reproduction lab and exploit tooling for CVE-2026-75604 , an unauthenticated path-traversal in the Next.js incremental cache that affects Windows hosts. A single un-escaped backslash lets an attacker read and write files outside...

pyre-check

!WARNING This Repository Is Archived This repository is no longer maintained and has been archived. Type checking: Pyre has been replaced by Pyrefly, our next-generation Python typechecker and language server. Security analysis Pysa: Pysa has moved to its own repository at github.com/facebook/Pys...

CVE-2026-110682

A flaw was found in perl-Cpanel-JSON-XS. The allownonref configuration is enabled by default, and the incrparse function inherits it. Because a top-level number, boolean true or false, or null has no closing delimiter, the incremental parser simply decodes whatever data has arrived at the time of...

CVE-2026-110678

A flaw was found in perl-Cpanel-JSON-XS. The parser appends each chunk to its buffer. In scalar or list context, it compares maxsize with how far it has progressed, not with the total buffer length. A chunk that starts with a NUL byte stops the parser before it progresses, and a call in void...

PT-2026-117576

Name of the Vulnerable Software and Affected Versions Cpanel::JSON::XS versions prior to 4.80 Description An issue exists where memory exhaustion can occur due to the buffering of incremental input beyond the max size limit within the incr parse function. The parser appends each data chunk to its...

PT-2026-117579

Name of the Vulnerable Software and Affected Versions Cpanel::JSON::XS versions 4.42 through 4.79 Description Input chunking can alter the decoded value of top-level numbers within the incr parse function. Because allow nonref is enabled by default and inherited by incr parse, top-level numbers,...

Astra Linux – Vulnerability in bind9

In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions of BIND 9 Supported Preview Edition such as 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1, as well as the release version 9.17.0 - 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a...

CVE-2026-95114

libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service...

UBUNTU-CVE-2026-95114

libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service...

DEBIAN-CVE-2026-95114

libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service...

CVE-2026-95114

libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service...

CVE-2026-95114: Out-of-bounds Read

libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service...

CVE-2026-95114

The libwebsockets library contains an out-of-bounds read vulnerability within the Lightweight Embedded JSON Parser (LEJP) incremental parser located in lib/misc/lejp.c. A remote attacker can trigger this flaw by submitting specially crafted JSON data , leading to an invalid memory read that cause...

PT-2026-111608

Name of the Vulnerable Software and Affected Versions libwebsockets affected versions not specified Description An out-of-bounds read exists in the LEJP incremental parser within the lib/misc/lejp.c file. This flaw allows a remote attacker to trigger a denial of service. An out-of-bounds read...