CVE-2020-11883

CVE-2020-11883 vue-storefront-api vulnerability 🛠 Setup $ yarn instal $ tsnd . 🧨 Examples Message format $ tsnd . In this example, I tested the "Lights.ie" page. 🙀 Disclaimer This application is for testing purposes only, I am not responsible for any problems that may arise. Please test only wher...

Security update for rsyslog

This update for rsyslog fixes the following issues: CVE-2026-61548: parsing of crafted RFC 5424 messages in mmpstrucdata can lead to a stack buffer overflow bsc1272414. Configuration-dependent issue in the optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd...

OESA-2026-3006 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer...

CVE-2026-42767

A NULL pointer dereference vulnerability exists in the OpenSSL CMP client, which can be triggered by an attacker-controlled CMP (Certificate Management Protocol) server. By crafting a CMP response containing a CRMF (Certificate Request Message Format) CertRepMessage where the symmAlg field contai...

CLSA-2026-1777369264 wireshark: Fix of CVE-2022-0586

CVE-2022-0586: fix infinite loop in RTMPT dissector rtmptgetamflength...

CVE-2020-36894 Eibiz i-Media Server Digital Signage 3.8.0 Unauthenticated User Creation Vulnerability

Eibiz i-Media Server Digital Signage 3.8.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through AMF-encoded object manipulation. Attackers can send crafted serialized objects to the /messagebroker/amf endpoint to create administrative...

PT-2025-50515

Eibiz i-Media Server Digital Signage 3.8.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through AMF-encoded object manipulation. Attackers can send crafted serialized objects to the /messagebroker/amf endpoint to create administrative...

CVE-2025-46784

A denial of service vulnerability exists in the lassonodeinitfrommessagewithformat functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a memory depletion, resulting in denial of service. An attacker can send a malformed SAML response to trigger this vulnerabili...

CVE-2025-46784

The connected advisories confirm CVE-2025-46404, CVE-2025-46705, CVE-2025-46784 and CVE-2025-47151 affect the lasso library (Entr'ouvert Lasso / liblasso) used for Liberty/SAML processing. Descriptions show a mix of denial-of-service via malformed SAML responses causing memory depletion or crashe...

EUVD-2018-1076

Malware in sbrugna...

EUVD-2013-0463

Malware in sbrugna...

EUVD-2020-2566

Malware in sbrugna...

messageformat security vulnerability

messageformat is a messageformat open source ICU message format and Unicode message format library for Javascript. A security vulnerability exists in messageformat versions prior to 3.0.1, which stems from insufficient validation of nested message keys and could lead to a prototype pollution atta...

CLSA-2024-1732194412 Fix of 14 CVEs

Update to 8u432-ga fixing a number of CVEs - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: infinite loop vunlerability in SymbolTable - CVE-2024-21140: int overflow/underflow in Range Check Elimination - CVE-2024-21144: invalid header validation leads to Pack200 excessive loading time -...

@w20/w20 (>=2.4.0, <=2.5.1), @w20/w20-bootstrap-2 (2.2.0) +15 more potentially affected by CVE-2024-8373 via angular-message-format (1.8.3)

angular-message-format NPM version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on angular-message-format and may be impacted: - @w20/w20 =2.4.0, =1.3.0, =2.3.0, =3.3.0, =2.2.0-rc.1, =1.3.0-rc.1, =2.2.0-rc.2, =2.2.0-rc.3 and more Source cves:...

@w20/w20 (>=2.4.0, <=2.5.1), @w20/w20-bootstrap-2 (2.2.0) +15 more potentially affected by CVE-2024-8372 via angular-message-format (1.8.3)

angular-message-format NPM version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on angular-message-format and may be impacted: - @w20/w20 =2.4.0, =1.3.0, =2.3.0, =3.3.0, =2.2.0-rc.1, =1.3.0-rc.1, =2.2.0-rc.2, =2.2.0-rc.3 and more Source cves:...

SolarWinds Security Event Manager Code Execution

The vulnerability of the Security Event Manager SEM, a software tool for monitoring network infrastructure formerly known as SolarWinds Log & Event Manager, is related to deficiencies in the deserialization mechanism when processing AMF Action Message Format data. Exploiting this vulnerability...

@w20/w20 (>=2.4.0, <=2.5.1), @w20/w20-bootstrap-2 (2.2.0) +15 more potentially affected by CVE-2024-21490 via angular-message-format (1.8.3)

angular-message-format NPM version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on angular-message-format and may be impacted: - @w20/w20 =2.4.0, =1.3.0, =2.3.0, =3.3.0, =2.2.0-rc.1, =1.3.0-rc.1, =2.2.0-rc.2, =2.2.0-rc.3 and more Source cves:...

@w20/w20 (>=2.4.0, <=2.5.1), @w20/w20-bootstrap-2 (2.2.0) +15 more potentially affected by CVE-2023-26116 via angular-message-format (1.8.3)

angular-message-format NPM version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on angular-message-format and may be impacted: - @w20/w20 =2.4.0, =1.3.0, =2.3.0, =3.3.0, =2.2.0-rc.1, =1.3.0-rc.1, =2.2.0-rc.2, =2.2.0-rc.3 and more Source cves:...

@w20/w20 (>=2.4.0, <=2.5.1), @w20/w20-bootstrap-2 (2.2.0) +15 more potentially affected by CVE-2023-26118 via angular-message-format (1.8.3)

angular-message-format NPM version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on angular-message-format and may be impacted: - @w20/w20 =2.4.0, =1.3.0, =2.3.0, =3.3.0, =2.2.0-rc.1, =1.3.0-rc.1, =2.2.0-rc.2, =2.2.0-rc.3 and more Source cves:...