CVE-2026-103224

The io.vertx:vertx-mysql-client component in Eclipse Vert.x versions [4.0.0, 4.5.34] , [5.0.0, 5.0.12] , [5.1.0, 5.1.9] , and [5.2.0, 5.2.0] is vulnerable to an out-of-memory crash . The root cause is that the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-...

CVE-2026-103223

The io.vertx:vertx-pg-client component in Eclipse Vert.x versions [4.0.0, 4.5.34], [5.0.0, 5.0.12], [5.1.0, 5.1.9], and [5.2.0, 5.2.0] is vulnerable to an out-of-memory crash. The PostgreSQL message decoder fails to validate the 4-byte message length field from the PostgreSQL wire protocol. A mal...

CVE-2026-103223

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send...

CVE-2026-103223

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send...

EUVD-2026-101961

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the TDS message decoder in the Vert.x MSSQL client vertx-mssql-client aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or...

CVE-2026-102462

The io.vertx:vertx-mssql-client component in Eclipse Vert.x versions [4.0.0, 4.5.34], [5.0.0, 5.0.12], [5.1.0, 5.1.9], and [5.2.0, 5.2.0] contains a vulnerability in the TDS message decoder . The decoder aggregates inbound TDS packets into a composite direct-memory buffer without a cumulative siz...

CVE-2026-102462

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the TDS message decoder in the Vert.x MSSQL client vertx-mssql-client aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or...

CVE-2026-102462

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the TDS message decoder in the Vert.x MSSQL client vertx-mssql-client aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or...

CVE-2021-40352

CVE-2021-40352 Opnemr Version 6.0.0 Has a security vulnerability where an attacker who has Physician Access can read messages with were sent to others members including admin messages the vulnerability exits in the print message feature = "pnotesprint.php?noteid=16" changing the "noteid=" to any...

CVE-2026-107349

A flaw was found in PgBouncer. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a startup message that contains an empty parameter name in its options. This causes PgBouncer to enter an infinite loop during startup parameter processing, consuming high CPU resources...

datapower-redis-rce-exploit

datapower-redis-rce-exploit CVE-2020-5014 A POC for IBM DataPower Authenticated Redis RCE Exploit abusing the "Test Message" Function. Full explination and demo on Youtube Blog post on tomcope.com Explanation Using the DataPower "Send a Test Message" function available through a authenticated...

VanCleef

VanCleef Rancher 2.1.4 Web Parameter Tampering CVE-2019-11881 ./vancleef.rb rancherip rancherport messagetodisplay double-quoted Example: ./vancleef.rb 192.168.0.1 8080 "Rancher is outdated. Please update following the instructions at http://192.168.0.25/rancher-updating" MITRE CVE Announcement...

heartbleed

Heartbleed Bug Description of the scenario The Heartbleed bug is an example of a cybersecurity attack that exploits a vulnerability in the OpenSSL library. Briefly, a missing validation step in the OpenSSL library could allow a hacker to access sensitive information on a server that is using the...

CVE-2023-34840

CVE-2023-34840 Vulnerability Explanation All versions in angular-ui-notification are vulnerable to XSS due to the library not sanitizing the input provided by the user. In order to safely use this library, sanitizing / encoding the parameters passed to this library is highly recommended, such as...

PT-2026-114834

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send...

PT-2026-114835

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send...

VulnCheck KEV: CVE-2026-102764

BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance...

Queue Manager Component Microsoft Message Queuing Service Code Execution

The vulnerability of the Queue Manager component of the Microsoft Message Queuing service on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2025-32433

CVE-2025-32433 A critical vulnerability in Erlang/OTP SSH server allows unauthenticated remote code execution RCE. The flaw exists in the SSH protocol message handling mechanism, enabling attackers to execute arbitrary commands without requiring authentication credentials. Impact Critical severit...

DEBIAN-CVE-2026-110832

FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wtsreaddrdynvcdatafirst that allows authenticated clients to force servers to commit large memory allocations. Attackers can send a seven-byte DATAFIRST message on an opened DVC declaring a large 32-bit length, causing...