CVE-2026-77474

The destructive_command_guard (dcg) tool (prior to version 0.6.6 ) is vulnerable to an exponential-time command-substitution preprocessing flaw. The issue occurs because nested or unclosed substitutions (e.g., $( or $(() cause the scanner to recursively rescans the remaining command suffix. This ...

CVE-2026-42270

The countly-server (the server-side component of Countly) is vulnerable to an unauthenticated Denial of Service (DoS) attack in versions prior to 24.05.50 and 25.03.44 . The root cause is that certain public image and screenshot routes—including star-rating/images/, dashboards/images/screenshots/...

CVE-2026-42270 countly-server: Unauthenticated Denial of Service (DoS) via Unhandled Stream Exception

countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, star-rating/images/ and dashboards/images/screenshots/ are among public image and screenshot routes using the local fs storage backend that call getStream and pipe filesystem streams t...

Spring4Shell-POC

Spring4Shell CVE-2022-22965 - Remote Code Execution Proof of Concept A fully containerized Proof of Concept PoC demonstrating the exploitation of Spring4Shell CVE-2022-22965 , resulting in Remote Code Execution RCE against a vulnerable Spring Framework application deployed on Apache Tomcat. The...

CVE-2026-68906 libIEC61850: Infinite loop and out-of-bounds read in ACSE parseUserInformation when parsing a malformed AARE PDU

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, parseUserInformation in src/mms/isoacse/acse.c checks len for zero before validating the negative bufPos returned by BerDecoderdecodeLength fo...

CVE-2026-68906

The libIEC61850 open-source implementation of IEC 61850 protocols is vulnerable to an infinite loop and out-of-bounds read in the parseUserInformation function located in src/mms/iso_acse/acse.c. The root cause is a failure to properly validate the negative bufPos returned by BerDecoder_decodeLen...

CVE-2026-68907

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess reverses the source and destination arguments to StringUtilscopyStringToBuffer while constructing an MMSASSOCIATIONSPECIFIC...

EUVD-2026-102911

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess reverses the source and destination arguments to StringUtilscopyStringToBuffer while constructing an MMSASSOCIATIONSPECIFIC...

CVE-2026-68907

The libIEC61850 library, an open-source implementation of IEC 61850 protocols, contains a server-side out-of-bounds stack read vulnerability in versions prior to 1.6.2 . The root cause is in the checkDataSetAccess function, which reverses the source and destination arguments when calling StringUt...

CVE-2026-68907 libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer arguments

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess reverses the source and destination arguments to StringUtilscopyStringToBuffer while constructing an MMSASSOCIATIONSPECIFIC...

CVE-2026-89778

A flaw was found in the Linux kernel's isofs ISO 9660 file system component, specifically within the zisofs decompression logic. A local attacker could exploit this vulnerability by mounting a specially crafted ISO9660 image. When a compressed file on such an image contains a malformed 'ZF' Rock...

EUVD-2026-102934

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url:nPath before the lenurl = nPath guard. A short destination causes a slice-bounds panic when the...

CVE-2026-102941

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url:nPath before the lenurl = nPath guard. A short destination causes a slice-bounds panic when the...

CVE-2026-102941 gomarkdown/markdown IsSafeURL panics on short URLs

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url:nPath before the lenurl = nPath guard. A short destination causes a slice-bounds panic when the...

CVE-2026-102941

The github.com/gomarkdown/markdown Go library (prior to version 0.0.0-20260724235538-61af6e1e6971 ) contains a slice-bounds panic in the parser.IsSafeURL function located in parser/parser.go . The root cause is that the code slices url[:nPath] before verifying that len(url) >= nPath. This vuln...

CVE-2026-111270

A flaw was found in libmodplug. A local attacker could cause a Denial of Service DoS or memory corruption by tricking a user or service into processing a specially crafted Digital Sound Module DSM audio file. This issue occurs because the DSM file parser fails to properly validate pattern counts,...

CVE-2026-111156

A flaw was found in libtimidity. By providing a specially crafted SoundFont .sf2 file with unvalidated preset header values, an attacker can trigger out-of-bounds heap memory access in the initsoundfont function. This issue can lead to heap memory corruption or an application crash, resulting in ...

CVE-2026-111271

A flaw was found in libmodplug. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing applications that rely on the library to process audio files. By enticing a user or automated system to load a specially crafted AMS audio tracker file, the decoder reads data past t...

CVE-2026-111166

A flaw was found in libmikmod. An attacker could exploit this vulnerability by providing a specially crafted IMF module file to an application utilizing the library. When the file is parsed by the IMFLoad loader function, an out-of-bounds read occurs in heap memory, causing the application to cra...

CVE-2026-111159

A flaw was found in libewf. An attacker could exploit this vulnerability by convincing a user to process a specially crafted file with oversized extended attribute metadata. Due to improper size validation, the library performs an out-of-bounds memory read, which can cause the application to cras...