3120 matches found
tornado-python: Tornado: Denial of Service via large multipart bodies
A flaw was found in tornado-python. A remote attacker can exploit this vulnerability by sending a specially crafted, very large multipart body with numerous parts. Because the parsing of these large bodies occurs synchronously on the main thread, it can consume excessive resources, leading to a...
CVE-2026-7696: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. This impacts an unknown function of the file /SubstationWEBV2/main/uploadH5Files. The manipulation of the argument File results in unrestricted upload. The attack may be launched...
CVE-2026-7694: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System 1.3.0. The impacted element is an unknown function of the file /SubstationWEBV2/main/elecMaxMinAvgValue. Executing a manipulation of the argument fCircuitids can lead to sql injection. The...
CVE-2026-30363
flipperzero-firmware commit ad2a80 was discovered to contain a stack overflow in the "Main" function...
CVE-2026-37538
Buffer overflow vulnerability in socketcand 0.4.2 in file socketcand.c in function main allows attackers to cause a denial of service or other unspecified impacts via crafted busname...
EUVD-2026-26501
A security vulnerability has been detected in alexta69 MeTube up to 2026.04.09. This affects the function onprepare of the file app/main.py of the component CORS Policy. The manipulation leads to permissive cross-domain policy with untrusted domains. The attack is possible to be carried out...
EUVD-2026-26705
flipperzero-firmware commit ad2a80 was discovered to contain a stack overflow in the "Main" function...
PT-2026-36534
Name of the Vulnerable Software and Affected Versions Flipperzero firmware affected versions not specified Description A stack overflow exists in the Main function, which allows attackers to execute arbitrary code. This issue is currently being exploited in real-world incidents. Recommendations A...
socketcand 安全漏洞
socketcand is a CAN bus network service daemon from the personal developer Jan-Niklas Meier. A security vulnerability exists in socketcand version 0.4.2, which stems from a buffer overflow in the main function in the socketcand.c file, allowing an attacker to cause a denial of service or other...
CVE-2026-37538
Buffer overflow vulnerability in socketcand 0.4.2 in file socketcand.c in function main allows attackers to cause a denial of service or other unspecified impacts via crafted busname...
Automotive Grade Linux app-framework-main 路径遍历漏洞
Automotive Grade Linux app-framework-main is an application framework core component from Automotive Grade Linux, Inc. A path traversal vulnerability exists in Automotive Grade Linux app-framework-main version 17.1.12 and earlier, which stems from the presence of a Zip Slip path traversal and a...
CVE-2026-30363
The Flipper Zero firmware (specifically commit ad2a80 ) contains a stack overflow vulnerability within the Main() function. This flaw can be exploited by an attacker to achieve arbitrary code execution . While the vulnerability is reportedly being exploited in real-world incidents, there is curre...
CVE-2026-30363: Stack-based Buffer Overflow
flipperzero-firmware commit ad2a80 was discovered to contain a stack overflow in the "Main" function...
CVE-2026-30363
flipperzero-firmware commit ad2a80 was discovered to contain a stack overflow in the "Main" function...
PT-2026-36322
A security vulnerability has been detected in alexta69 MeTube up to 2026.04.09. This affects the function on prepare of the file app/main.py of the component CORS Policy. The manipulation leads to permissive cross-domain policy with untrusted domains. The attack is possible to be carried out...
CVE-2026-37538
Buffer overflow vulnerability in socketcand 0.4.2 in file socketcand.c in function main allows attackers to cause a denial of service or other unspecified impacts via crafted busname...
PT-2026-36512
Name of the Vulnerable Software and Affected Versions socketcand version 0.4.2 Description A buffer overflow occurs in the main function within the socketcand.c file. This issue allows attackers to cause a denial of service or other unspecified impacts by using a crafted bus name variable...
CVE-2026-37538: Stack-based Buffer Overflow
Buffer overflow vulnerability in socketcand 0.4.2 in file socketcand.c in function main allows attackers to cause a denial of service or other unspecified impacts via crafted busname...
CVE-2026-37531: Improper Limitation of a Pathname to a Restricted Directory
AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability CWE-22 combined with a TOCTOU race condition CWE-367 in the widget installation flow. The isvalidfilename function in wgtpkg-zip.c validates ZIP entry names but does not check for dot notation directory traversal...