PT-2026-120221

Dulwich before 1.2.9 contains a denial of service vulnerability in Pack.resolve object that allows attackers to cause infinite recursion via self-referential OFS DELTA objects. Attackers can supply a malicious packfile with an OFS DELTA delta offset of 0 to exhaust CPU during clone, fetch, or...

PT-2026-110767

Name of the Vulnerable Software and Affected Versions Gitoxide gix-pack versions prior to 0.75.0 Description A denial of service issue exists where malicious remotes can crash fetch operations by sending crafted thin-pack OFS DELTA entries. An attacker can provide a thin pack containing a REF DEL...

PT-2026-94465

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs mft record alloc function fails to validate the usa ofs variable before using it to read the update sequence number from an on-disk...

PT-2026-84069

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, git delta apply in src/libgit2/delta.c trusts the attacker-controlled res sz value parsed by hdr sz...

Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs

...

PYSEC-2026-1067 Zope Command Execution Vulnerability

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p class in OFS/misc.py and the use of Python modules...

EUVD-2015-1158

Malware in sbrugna...

Design/Logic Flaw

A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider Electric OFS v3.5 with version v7.40 of SCADA Expert Vijeo Citect/CitectSCADA, OFS v3.5 with version v7.30 of Vijeo Citect/CitectSCADA, and OFS v3....

CVE-2015-1014

A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider Electric OFS v3.5 with version v7.40 of SCADA Expert Vijeo Citect/CitectSCADA, OFS v3.5 with version v7.30 of Vijeo Citect/CitectSCADA, and OFS v3....

CVE-2015-1014

CVE-2015-1014 affects Schneider Electric OPC Factory Server (OFS) 3.5 when used with SCADA Expert Vijeo Citect/CitectSCADA versions 7.20, 7.30, or 7.40. The vulnerability arises from DLL hijacking: a local user must load a crafted DLL into the system directory, and if the application opens that D...

CVE-2015-1014

A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider Electric OFS v3.5 with version v7.40 of SCADA Expert Vijeo Citect/CitectSCADA, OFS v3.5 with version v7.30 of Vijeo Citect/CitectSCADA, and OFS v3....

CVE-2015-1014: Uncontrolled Search Path Element

A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider Electric OFS v3.5 with version v7.40 of SCADA Expert Vijeo Citect/CitectSCADA, OFS v3.5 with version v7.30 of Vijeo Citect/CitectSCADA, and OFS v3....

PT-2019-7165

Name of the Vulnerable Software and Affected Versions Schneider Electric OFS v3.5 with version v7.40 of SCADA Expert Vijeo Citect/CitectSCADA Schneider Electric OFS v3.5 with version v7.30 of Vijeo Citect/CitectSCADA Schneider Electric OFS v3.5 with version v7.20 of Vijeo Citect/CitectSCADA...

PT-2018-2896

Name of the Vulnerable Software and Affected Versions VipNet Coordinator HW affected versions not specified Description The issue exists due to incorrect processing of the F field in the OFS command. This can allow a remote attacker to execute arbitrary code or cause a crash, disrupting informati...

PT-2014-3843

Name of the Vulnerable Software and Affected Versions Schneider Electric OPC Factory Server OFS versions 3.5 and earlier Description The issue is related to multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control. This can be exploited by remote attackers to cause a deni...

Schneider Electric OPC Factory Server OFS Client Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Schneider Electric OFS Client. User interaction is required to exploit this vulnerability in that the target must load a malicious file. The specific flaw exists within the parsing of the configuration...

PT-2014-3836

Name of the Vulnerable Software and Affected Versions Schneider Electric OPC Factory Server OFS versions 3.35 Description The issue is related to a stack-based buffer overflow in the C++ sample client. This can be exploited by local users to gain privileges through vectors involving a malformed...

CVE-2014-0774: Stack-based Buffer Overflow

Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server OFS TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file...

CVE-2011-3587

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p class in OFS/misc.py and the use of Python modules...

PT-2011-4542

Name of the Vulnerable Software and Affected Versions Zope versions 2.12.x through 2.13.x Plone versions 4.0.x through 4.0.9 Plone version 4.1 Plone versions 4.2 through 4.2a2 Description The issue allows remote attackers to execute arbitrary commands via vectors related to the p class in OFS/mis...