OESA-2026-3957 xmlrpc-c security update

XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop...

OESA-2026-3910 wget security update

GNU Wget is a free software package for retrieving files using HTTP, HTTPS, FTP and FTPS the most widely-used Internet protocols. It is a non-interactive commandline tool, so it may easily be called from scripts, cron jobs, terminals without X-Windows support, etc. Security Fixes: GNU wget is...

CVE-2024-44337

CVE-2024-44337 패키지 "github.com/gomarkdown/markdown"은 Markdown 텍스트를 파싱하여 HTML로 렌더링하는 Go 라이브러리입니다. 의사 버전 'v0.0.0-20240729232818-a2a9c4f' 커밋 'a2a9c4f76ef5a5c32108e36f7c47f8d310322252'에 해당 이전의 parser/block.go 파일에 있는 paragraph 함수에 논리적 문제가 존재합니다. 이 취약점은 원격 공격자가 특수 조작된 입력을 제공하여 무한 루프를 발생시킴으로써 서비스 거부DoS...

strilight

Strilight v0.2.0 High-Performance Algebraic Loop Lifting & Exact Rational Recurrence Engine for Python and C %20/%20O\log%20N-orange.svg Overview: Why Iterate When You Can Solve? Traditional compilers, runtimes, and JIT engines such as GCC, Clang, PyPy, or Numba treat loops as repetitive...

EUVD-2026-83662

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of files extracted from an uploaded archive, due to a variable being reused as a loop counter so that the check always passes, allowing users granted its gallery-management capability...

CVE-2026-81650

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of files extracted from an uploaded archive, due to a variable being reused as a loop counter so that the check always passes, allowing users granted its gallery-management capability...

CVE-2021-34767

CVE-2021-34767 説明 Cisco Catalyst 9800 シリーズ ワイヤレス コントローラ向け Cisco IOS XE ソフトウェアの IPv6 サービス拒否の脆弱性 Cisco Catalyst 9000 ファミリー ワイヤレス コントローラ向け Cisco IOS XE ワイヤレス コントローラ ソフトウェアの IPv6 トラフィック処理における脆弱性により、認証されていない隣接する攻撃者が、設定された VLAN にレイヤ 2 L2 ループを引き起こし、その VLAN でサービス拒否 DoS 状態を引き起こす可能性があります。この脆弱性は、特定のリンクローカル...

CVE-2023-46442_POC

CVE-2023-46442POC 環境: Java 8 CVE-2023-46442 の POC。Java 8 環境で Soot 4.4.1 より前のバージョンに存在するサービス拒否 DoS 脆弱性です。 悪意を持って作成されたメソッド本体を取得するとき、非常に小さいサイズのクラスファイルまたはメソッドが原因で、 巨大なリソース消費が発生し、JVM の設定次第では OutOfMemory に達するまで無限にループし続けます。 src/main/java/POC.java - 脆弱性のあるサンプルプログラム src/main/resources/Build$Builder.class -...

CVE-2026-81650: Unrestricted Upload of File with Dangerous Type

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of files extracted from an uploaded archive, due to a variable being reused as a loop counter so that the check always passes, allowing users granted its gallery-management capability...

CVE-2026-66730-Infinite-Loop-DoS-in-facil.io-MIME-Parser

セキュリティアドバイザリ: facil.io MIMEパーサーにおける無限ループDoS不完全なバウンダリ 割り当てられたCVE ID : CVE-2026-66730 製品: facil.io 影響を受けるバージョン: facil.io = 0.6.0 すべての0.6.x、すべての0.7.x、master; MIMEパーサーとともに0.6.0で導入 コンポーネント: lib/facil/http/http.c, lib/facil/http/parsers/httpmimeparser.h CWE: CWE-835 到達不能な終了条件を持つループ, CWE-400 制御されないリソース消...

CVE-2026-82560: Loop with Unreachable Exit Condition

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...

AZL-103478 CVE-2026-93749 affecting package python-tensorboard 2.16.2-6

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

AZL-103442 CVE-2026-93749 affecting package js-jquery 3.5.0-4

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

CVE-2026-93749

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

DEBIAN-CVE-2026-93749

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

UBUNTU-CVE-2026-93749

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

CVE-2026-93749

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

CVE-2026-69184

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsnameparse enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long descending pointer chain and many resource...

CVE-2026-93749 source-map-js through 1.2.1 Event Loop Denial of Service

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

CVE-2026-93749

source-map-js (through 1.2.1 ) fails to validate the per-section offset line value in indexed source maps, allowing a remote, unauthenticated attacker to supply an extremely large offset line value. This triggers synchronous event loop blocking for extended periods, preventing the service from ha...