[SECURITY] Fedora 45 Update: totem-pl-parser-3.26.7-4.fc45

A library to parse and save playlists, as used in music and movie players...

[SECURITY] Fedora 45 Update: sparse-0.6.4-4.gce1a6720f69e.fc45.9

Sparse is a semantic parser of source files: it's neither a compiler although it could be used as a front-end for one nor is it a preprocessor although it contains as a part of it a preprocessing phase. It is meant to be a small - and simple - library. Scanty and meager, and partly because of tha...

[SECURITY] Fedora 45 Update: raptor2-2.0.15-53.fc45

Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples...

[SECURITY] Fedora 45 Update: python-html5-parser-0.4.12-14.fc45

A fast, standards compliant, C based, HTML 5 parser for python...

[SECURITY] Fedora 45 Update: happy-2.1.7-3.fc45

Happy is a parser generator for Haskell. Given a grammar specification in BNF, Happy generates Haskell code to parse the grammar. Happy works in a similar w ay to the 'yacc' tool for C...

external_lib_AOSP10_r33_CVE-2021-45960_CVE-2021-46143-

Expat, Versión 2.2.6 Esto es Expat, una biblioteca en C para analizar XML, iniciada por James Clark en 1997. Expat es un analizador XML orientado a flujos. Esto significa que registras manejadores en el analizador antes de comenzar el análisis. Estos manejadores se invocan cuando el analizador...

pyOneNote

pyOneNote pyOneNote 是一个轻量级的 Python 库，用于读取 OneNote 文件。该解析器的主要目标是让网络安全分析师能够从 OneNote 文件中提取有用信息。 安装解析器 安装最新开发版本 pip install -U https://github.com/DissectMalware/pyOneNote/archive/master.zip --force 运行解析器 将当前目录中的所有嵌入文件导出 pyonenote -f example.one 将 example.one 中的所有嵌入文件导出到 outputdir pyonenote -f...

NPM: probe-image-size: Quadratic-time Denial of Service in the SVG Parser

NPM: probe-image-size: Quadratic-time Denial of Service in the SVG Parser vulnerability discovered by ? in WordPress Npm probe-image-size versions = 7.3.0...

probe-image-size: Quadratic-time Denial of Service in the SVG Parser

Overview probe-image-size scans the SVG header with a searching regular expression, //. On input that contains many , the engine restarts the ^ scan at every position and runs to end of input each time, giving quadratic time complexity. Both the synchronous and the streaming parser are affected...

EUVD-2026-57757

@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header...

Roundcube-CVE-2025-49113

Roundcube RCE 漏洞利用（CVE-2025-49113） 针对 CVE-2025-49113 的完整功能概念验证漏洞利用 🧠 摘要 CVE-2025-49113 是一个 漏洞，由于应用程序会话解析器中的逻辑缺陷，允许不安全的 PHP 对象反序列化。已认证用户可利用此问题在服务器上执行任意命令。 🔥 影响 具有 有效凭据 的攻击者（即使是低权限用户账户）可以利用此漏洞： 执行任意系统命令。 建立反向 shell 或部署持久化。 如果 Roundcube 是自托管的，则在内部网络中进行横向移动。 🧩 漏洞详情 类型： 不安全反序列化 → 远程代码执行 组件： PHP...

AutoFunkt

AutoFunkt d8888 888 8888888888 888 888 d88888 888 888 888 888 d88P888 888 888 888 888 d88P 888 888 888 888888 .d b. 8888888 888 888 88888b. 888 888 888888 d88P 888 888 888 888 d88 88b 888 888 888 888 "88b 888 .88P 888 d88P 888 888 888 888 888 888 888 888 888 888888K 888 d8888888888 Y88b 888 Y88b...

GitLabSniper

GitLabSniper CVE-2026-85706 — lectura arbitraria de archivos no autenticada en GitLab CE/EE detección · enumeración de proyectos públicos · recolección · shell interactiva · canalización subfinder/httpx Autor: Yunus Emre Öztaş mitsec X: x.com/ynsmroztas GitHub: github.com/ynsmroztas Sitio:...

CVE-2026-104861 probe-image-size: Quadratic-time Denial of Service in the SVG Parser

probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parsesync/svg.js and lib/parsestream/svg.js use the searching regular expression //, which repeatedly scans to the end of input when attacker-controlled data contains many less-than characters without ...

CVE-2026-104861 probe-image-size: Quadratic-time Denial of Service in the SVG Parser

probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parsesync/svg.js and lib/parsestream/svg.js use the searching regular expression //, which repeatedly scans to the end of input when attacker-controlled data contains many less-than characters without ...

CVE-2026-104844

A flaw was found in postcss-selector-parser. A remote attacker could exploit this vulnerability by submitting a specially crafted CSS selector containing numerous class or ID identifiers to an application that parses untrusted input. Due to inefficient processing and repeated scanning during...

Melkor_ELF_Fuzzer

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- - | -- 描述 -- | - -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- - Melkor - 一款 ELF 文件格式模糊测试器 Melkor 是 J. R. R. 托尔金中土世界传说故事集中的虚构角色，是第一位黑暗魔君，也是索伦（Sauron）的主人。他在《指环王》中被简要提及，并以以下事迹闻名： "... 在维拉（Valar）攻击他之前，梅尔寇（Melkor）俘获了一批精灵（ELVES），他折磨并腐化他们，培育出了第一批半兽人（Orcs）。"...

CVE-2026-104844

PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it. Prior to 7.1.6, src/parser.js splitWord can receive a flat selector as one word token carrying many class or ID indexes because period and hash characters are not tokenizer word delimiters. The...

CVE-2021-22205

漏洞影响 在GitLab CE/EE中发现了一个问题，影响从11.9版本开始的所有版本。GitLab未能正确验证传递给文件解析器的图像文件，导致远程命令执行。 受影响产品 Gitlab CE/EE /tmp/1.txt" !攻击命令1https://assets.kitploit.com/production/public/readmes/23763/49b627f1...

CVE-2026-104844

The PostCSS Selector Parser (prior to version 7.1.6 ) is vulnerable to a Denial of Service (DoS) attack due to quadratic complexity in flat selector parsing. The root cause lies in src/parser.js, where splitWord() accepts selectors with numerous class or ID indexes because period and hash charact...