Lucene search
+L

136607 matches found

ATTACKERKB
ATTACKERKB
added 2026/07/28 12:0 a.m.9 views

CVE-2026-51263

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.4AI score0.00434EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/28 12:0 a.m.14 views

CVE-2026-51268

Summary of concrete details found : CVE-2026-51268 is connected to a heap-based buffer overflow in ESP32-audioI2S 3.4.5, affecting the host parsing logic. The dismantle_host()/host() parsing of untrusted host and URL input leads to copying parsed segments (host, request_host, extension, query_str...

6.2AI score0.00398EPSS
SaveExploits0
CVE
CVE
added 2026/07/28 12:0 a.m.17 views

CVE-2026-51252

The connected records identify a concrete issue: ESP32-audioI2S 3.4.5 contains a buffer overflow in MP3Decoder::UnpackSFMPEG1 caused by missing input validation on attacker-controlled MP3 metadata. This is a vulnerability in the MP3 decoding path; exploitation details are not provided in the docu...

6.2AI score0.0034EPSS
SaveExploits0
CVE
CVE
added 2026/07/28 12:0 a.m.14 views

CVE-2026-51266

CVE-2026-51266 is rejected/not used and does not represent an active vulnerability entry.

6.4AI score0.00626EPSS
SaveExploits0
Packet Storm News
Packet Storm News
added 2026/07/28 12:0 a.m.10 views

A Structuration Approach to Theorizing Cybersecurity Practice: The STARC Model

The problem: Cybersecurity practice runs simultaneously across analysts, teams, organizations, sectors, and regulators, co-evolves with adversaries, and increasingly blends human and algorithmic decision-making. The theories applied to it operate at single organizational levels and cannot explain...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.15 views

PT-2026-65651

Summary JSON-Schema $ref values pointing at HTTP or HTTPS URLs are silently dereferenced by datamodel-code-generator with no IP/host validation, no scheme allow-list, and redirects followed unconditionally. The --allow-remote-refs gate added in 0.56.0 defaults to None, which only emits a...

8.2CVSS6.3AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.13 views

PT-2026-65648

Summary datamodel-code-generator resolves JSON-Schema $ref targets that point at the local filesystem without restricting them to the input/base directory and without honoring the remote-reference security control. In the default configuration, an attacker who controls an input schema a "paste yo...

7.5CVSS6.1AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.11 views

PT-2026-65638

Summary datamodel-code-generator is vulnerable to code injection when generating Python models from an attacker-controlled JSON Schema, OpenAPI, YAML, JSON, Avro, Protobuf, or XSD schema. When a property carries a "default factory" key, its value is interpolated verbatim — as a raw Python...

8.8CVSS6.5AI score
SaveExploits0References5
CVE
CVE
added 2026/07/28 12:0 a.m.19 views

CVE-2026-51275

The CVE-2026-51275 record is supported by connected sources indicating a concrete issue in schreibfaul1 ESP32-audioI2S 3.4.5. The vulnerability is a heap-based buffer overflow in the ID3v2 APIC frame parsing within audiolib, caused by missing length validation of the APIC frame size. This leads t...

6.6AI score0.00407EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.9 views

PT-2026-65612

Name of the Vulnerable Software and Affected Versions datamodel-code-generator versions 0.9.1 through 0.60.1 Description An issue exists where the software silently dereferences HTTP or HTTPS URLs provided in JSON Schema $ref values without performing IP or host validation, scheme allow-listing, ...

8.2CVSS5.8AI score0.00216EPSS
SaveExploits1References9
CVE
CVE
added 2026/07/28 12:0 a.m.16 views

CVE-2026-51269

This CVE-2026-51269 entry is rejected/not used and does not represent an active vulnerability.

6.4AI score0.0043EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/07/28 12:0 a.m.6 views

CVE-2026-51254

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.4AI score0.00126EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.9 views

PT-2026-65639

Webhook Custom Path Authentication Bypass in pytonapi Summary TonapiWebhookDispatcher in pytonapi 2.2.0 fails to validate the Authorization header when a webhook handler is registered with the documented path= argument. During setup, bearer tokens are stored only under the default suffix paths...

7.5CVSS6.1AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/28 12:0 a.m.10 views

CVE-2026-51259

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.4AI score0.00373EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/28 12:0 a.m.6 views

CVE-2026-51267

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.4AI score0.00542EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.9 views

PT-2026-65665

Summary datamodel-code-generator's built-in HTTP fetcher http.get body issues an httpx.GET against any URL passed to --url or reached via a redirect chain with no allow-list, no deny-list, no IP/host validation, and follow redirects=True. Loopback addresses, RFC1918 ranges, link-local...

8.2CVSS6AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.9 views

PT-2026-65684

Impact A single malformed inbound UDP packet on the RTP/ICE socket can remotely terminate an active RTP or WebRTC media session. The packet receive handler indexes packet and STUN attribute bytes without sufficient length checks and throws, and the UDP receive loop converted any such exception in...

7.5CVSS5.9AI score
SaveExploits0References5
AlmaLinux
AlmaLinux
added 2026/07/28 12:0 a.m.11 views

None: coreutils bug fix and enhancement update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Bug Fixes and Enhancements: Fix execution of the downstream tests in coreutils-df-direct.patch and coreutils-i18n.patch almalinux-8.10.z...

5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.10 views

PT-2026-65642

Summary A malicious input schema OpenAPI / JSON Schema can execute arbitrary Python code on the machine that imports the generated model. The x-python-import and customTypePath schema extensions flow, unsanitized, into the import statements datamodel-code-generator emits. A newline embedded in th...

7.5CVSS6.8AI score
SaveExploits0References5
CVE
CVE
added 2026/07/28 12:0 a.m.10 views

CVE-2026-51274

The CVE-2026-51274 entry relates to the schreibfaul1 ESP32-audioI2S 3.4.5 stack, where the heap-based buffer overflow occurs in the ID3v2 SYLT synchronized lyrics parser in audiolib. Root cause: missing bounds validation on attacker-controlled frame size and improper memory access during lyric pa...

6.7AI score0.00414EPSS
SaveExploits0
Rows per page
Query Builder