CVE-2021-23639

Overview md-to-pdf is a CLI tool for converting Markdown files to PDF. Affected versions of this package are vulnerable to Remote Code Execution RCE due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine. Usage: python3 cve-2021-23639.py targerurl...

CVE-2026-78845

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution RCE via UPnP root description parsing...

CVE-2026-23005-Matter-Commissioning-Code-Brute-Force-Without-Rate-Limit

CVE-2026-23005 – Matter Commissioning Code Brute‑Force Without Rate Limit Program Code Python Matter simulation mattercommissioningsim.py import random realcode = random.randint10000000, 99999999 def attemptjoincodeattempt: Simulate joining: no delay, no lockout if codeattempt == realcode:...

CVE-2026-78845

Several Aidot products are vulnerable to Remote Code Execution (RCE) due to an issue in UPnP root description parsing . The affected devices include the Linkind Matter Smart Plug (version 1.01.32), OREiN Matter Smart Light Bulb (version 3.15.21), and the Linkind Wi-Fi Smart Light Bulb (version 3....

EUVD-2026-111070

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution RCE via UPnP root description parsing...

CVE-2026-78846

Multiple AiDot devices are vulnerable to a heap-based buffer overflow via SSDP location header parsing...

CVE-2026-78846

Multiple AiDot devices, specifically the AiDot Linkind Matter Smart Plug version 1.01.32 , are vulnerable to a heap-based buffer overflow . The flaw exists during the parsing of the SSDP location header . While the CVSS score indicates a CRITICAL severity (9.8) with high impact on confidentiality...

CVE-2026-78846

Multiple AiDot devices are vulnerable to a heap-based buffer overflow via SSDP location header parsing...

EUVD-2026-108204

AiDot Linkind Matter Smart Plug 1.01.32 is vulnerable to Buffer Overflow via SSDP local header parsing...

CVE-2026-78847

A flaw was found in gray-matter. The component uses the eval function to parse document metadata front matter specified as JavaScript. An attacker who supplies malicious input containing JavaScript front matter can exploit this behavior to achieve arbitrary code execution on the target system...

SUSE CVE-2026-78847

An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...

EUVD-2026-84242

An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningStep function in the ChipDeviceController.cpp component...

EUVD-2026-84241

An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...

01-zdyzl (1.0.0), 0mni-cli (0.1.1) +14418 more potentially affected by CVE-2026-78847 via gray-matter (>=0.2.8, <=4.0.3)

gray-matter NPM version =0.2.8, =0.1.0, =0.1.0-dev.2580522, =0.5.0, =1.0.0, =1.0.0, =0.0.2, =1.1.0 - 666fr3k 1.0.1 - 6thbridge-hexa-docs 0.0.1 - 8-divine 1.4.0 and more Source cves: CVE-2026-78847 Source advisory: SNYK:JS-GRAYMATTER-20532010...

CVE-2026-78806

An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningStep function in the ChipDeviceController.cpp component...

CVE-2026-78847

An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...

CVE-2026-78806

An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningStep function in the ChipDeviceController.cpp component...

CVE-2026-78806

An issue in the Matter Standard Specification-Implementation gap v1.5.1 (Matter Project Chip V1.5.1) allows a local attacker to obtain sensitive information . The vulnerability exists within the PerformCommissioningStep function in the ChipDeviceController.cpp component. No specific exploit detai...

CVE-2026-78847: Improper Neutralization of Directives in Dynamically Evaluated Code

An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...

CVE-2026-78847

An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...