401192 matches found
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when "gnutlsrecordsend" returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocke...
CVE-2026-113868
When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap memory in its NTLM response, disclosing that memory to the server. A...
MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation
Summary In affected versions, servers put no limit on how many array elements and object keys they validated in one request. One HTTP request within the default 4 MiB size limit could exhaust the server's memory, and the process aborted with JavaScript heap out of memory. No credentials are neede...
GHSA-46JR-4WX8-V453 MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation
Summary In affected versions, servers put no limit on how many array elements and object keys they validated in one request. One HTTP request within the default 4 MiB size limit could exhaust the server's memory, and the process aborted with JavaScript heap out of memory. No credentials are neede...
CVE-2026-113679
A flaw was found in HarfBuzz. An attacker can trigger an out-of-bounds write by enticing an application using the experimental WebAssembly Wasm shaper to process a specially crafted font. Due to an incorrect function signature in the glyph string conversion interface, the font's embedded...
CVE-2026-112094
A flaw was found in mxml. A remote attacker can exploit a use-after-free vulnerability by supplying specially crafted XML input processed by the mxmlloaddata function. This flaw can lead to memory corruption, causing a Denial of Service DoS through an application crash or potentially allowing...
CVE-2026-113868
Thunderbird is vulnerable to an uninitialized memory disclosure and out-of-bounds read during NTLM authentication for POP3 and SMTP servers. The issue stems from a lack of validation on the server's challenge string; a malicious server can provide an invalid base64 challenge to cause Thunderbird ...
EUVD-2026-105295
When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap memory in its NTLM response, disclosing that memory to the server. A...
CVE-2026-113868 Uninitialized memory disclosure and out-of-bounds read in POP3 and SMTP NTLM authentication
When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap memory in its NTLM response, disclosing that memory to the server. A...
CVE-2026-102477
A flaw was found in Eclipse Vert.x vertx-grpc-server. The server's configured maximum message size limit is enforced only on the received compressed data rather than on the uncompressed payload. A remote attacker can exploit this flaw by sending a specially crafted compressed message, causing...
sqlite-wal-pagesize
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-wal-pagesize sqlite-wal-pagesize Class: Info leak Reach: Local SQLite 3.53.4 b09c88c still short-reads a WAL frame into a full pager page with no tail memset. walIndexRecover accepts any power-of-two WAL page...
Lumma-Stealer-dllhost-Hollowing-C2-Domains-Payload-Extraction-Analysis
1. Setup.exe – Privacy, Driver & Memory Strings Process Hacker memory analysis of the setup.exe dropper reveals that Lumma Stealer targets privacy settings, installs drivers, and manages memory. Key Strings Observed: Privacy Camera – Attempts to access or disable camera privacy settings. Privacy...
CVE-2026-31431
CopyFail CVE-2026-31431 Overview CopyFail is a proof-of-concept exploit for CVE-2026-31431, targeting a memory corruption vulnerability in the Linux Kernel Crypto API AFALG. The exploit leverages the splice system call to perform unauthorized page-cache patching of the /usr/bin/su binary, enablin...
CVE-2026-100132
Acrobat for Edge is vulnerable to an out-of-bounds read (CWE-125) which could allow an attacker to disclose sensitive memory . Exploitation requires user interaction , such as a victim visiting a maliciously crafted URL or interacting with a compromised web page. No specific exploit details or re...
CVE-2026-21266
This CVE ID is rejected and does not represent an active vulnerability entry, as it was issued in error.
CVE-2026-112284
A flaw was found in libaribcaption. An out-of-bounds read vulnerability exists within the caption decoding component due to missing upper bound checks when handling character sets. An attacker can exploit this issue by supplying specially crafted caption data for the application to process...
CVE-2026-113672
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr, or importbin to the repository root. Absolute paths, parent-directory...
CVE-2026-88382
A flaw was found in hiredis. The parser for REdis Serialization Protocol RESP aggregate types does not properly restrict memory allocation when handling incoming replies. A remote attacker or malicious server could exploit this vulnerability by providing specially crafted RESP data, leading to...
CVE-2026-113672 Argo CD: A Jsonnet import can read files from the repo-server
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr, or importbin to the repository root. Absolute paths, parent-directory...