PT-2026-26950

RarmaRadio 2.72.3 contains a buffer overflow vulnerability in the Server field of the Network settings that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a malicious payload exceeding 4000 bytes into the Server field via the Settings...

Fickling has safety check bypass via REDUCE+BUILD opcode sequence

Assessment It is believed that the analysis pass works as intended, REDUCE and BUILD are not at fault here. The few potentially unsafe modules have been added to the blocklist https://github.com/trailofbits/fickling/commit/0c4558d950daf70e134090573450ddcedaf10400. Original report Summary All 5 of...

PT-2025-44627

Name of the Vulnerable Software and Affected Versions GameMaker IDE versions prior to 2024.14.0 Description An integer overflow exists in GameMaker IDE versions prior to 2024.14.0. This issue can result in application crashes, leading to denial-of-service DoS attacks. The network create server...

EUVD-1999-1262

Malware in sbrugna...

EUVD-2020-7184

Malware in sbrugna...

EUVD-2020-7187

Malware in sbrugna...

EUVD-2020-7183

Malware in sbrugna...

EUVD-2020-7189

Malware in sbrugna...

EUVD-2024-39404

Malicious code in bioql PyPI...

EUVD-2022-2274

Malicious code in bioql PyPI...

EUVD-2022-37055

Malicious code in bioql PyPI...

EUVD-2023-24304

Malicious code in bioql PyPI...

EUVD-2022-37054

Malicious code in bioql PyPI...

CVE-2025-9998 Improper validation of packets sequencing

The sequence of packets received by a Networking server are not correctly checked. An attacker could exploit this vulnerability to send specially crafted messages to force the application to stop...

CVE-2025-9998

CVE-2025-9998 describes an issue where the sequence of packets received by a Networking server is not correctly checked, enabling a potential denial-of-service via specially crafted messages to force the application to stop. Multiple sources (NVD, Red Hat, CVE.org, CIRCL, VulnEnrichment) corrobor...

Linux Distros Unpatched Vulnerability : CVE-2018-1313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and...

Security Bulletin: A denial-of-service attack, heap use after free, network server exploit, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service

Summary IBM Storage Defender - Resiliency Service is vulnerable to denial-of-service attack, heap use after free, network server exploit, and others. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-32873 DESCRIPTION: An issue was discovered in Django 4.2 before 4.2.2...

CVE-2022-34022

SQL injection vulnerability in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via a crafted POST request to /ResiotQueryDBActive...

CVE-2022-34021

Multiple Cross Site Scripting XSS vulnerabilities in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via the form fields...

CVE-2020-28349

An inaccurate frame deduplication process in ChirpStack Network Server 3.9.0 allows a malicious gateway to perform uplink Denial of Service via malformed frequency attributes in CollectAndCallOnceCollect in internal/uplink/collect.go. NOTE: the vendor's position is that there are no "guarantees...