CVE-2026-108545

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

CVE-2026-108545 SillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via Body Parsing

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

CVE-2026-108545 SillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via Body Parsing

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

CVE-2025-55763

CVE-2025-55763 Buffer Overflow in the URI parser of CivetWeb 1.16 latest release as of yet. Vulnerable code The crash occurs here in src/civetweb.c during the last strcat marked. Fix See the pull request. PoC The PoC crashes the server performing an heap overflow, however it is possible to achiev...

vbSparkle

What is vbSparkle ? vbSparkle is a source-to-source multi-platform Visual Basic deobfuscator based on partial-evaluation and is mainly dedicated to the analysis of malicious code written in VBScript and VBA Office Macro. It is written in native C and provides a .Net Standard library , and works o...

etl-parser

etl-parser Lettore di file di log Event Trace Log in puro Python etl-parser è una libreria di parsing pura Python 3 per file di log ETL di Windows. ETL è il formato predefinito per ETW così come il formato predefinito per il logger del kernel. etl-parser non ha dipendenze di sistema e funzionerà...

CVE-2025-66516-POC

⚠️ READ DISCLAIMER BEFORE USE ⚠️ Educational/Authorized Testing Only | License | Security Policy About This POC This repository contains a proof-of-concept POC exploit for CVE-2025-66516 , an XML External Entity XXE injection vulnerability in Apache Tika versions prior to 3.2.2. The vulnerability...

CLEANSTART-2026-HQ66440 non-blocking (asynchronous) JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints (default: 1000 characters)

Security vulnerability affects the apache-nifi package. The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters...

CorelightForSentinelOne

SentinelOne Dashboards for Singularity Operations Center Overview This guide will help you set up and utilize SentinelOne Dashboards, which offer powerful data insights for monitoring and analyzing your network traffic. Whether you're a security analyst, network administrator, or IT professional,...

Linux Distros Unpatched Vulnerability : CVE-2026-107823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM...

PT-2026-109600

Name of the Vulnerable Software and Affected Versions WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION versions prior to 44.2 Description An authentication bypass exists due to an OIDC Nonce Replay flaw. The Id Token Service Deprecated::process openidconnect token function uses the wp verify...

external_lib_AOSP10_r33_CVE-2021-45960_CVE-2021-46143-

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...

pyOneNote

pyOneNote pyOneNote is a lightweight python library to read OneNote files. The main goal of this parser is to allow cybersecurity analyst to extract useful information from OneNote files. Installing the parser Installing the latest development pip install -U...

Roundcube-CVE-2025-49113

Roundcube RCE Exploit CVE-2025-49113 A fully functional proof-of-concept exploit for CVE-2025-49113 🧠 Summary CVE-2025-49113 is an The vulnerability is the result of a logic flaw in the application's session parser, which allows insecure deserialization of PHP objects. Authenticated users can...

AutoFunkt

AutoFunkt d8888 888 8888888888 888 888 d88888 888 888 888 888 d88P888 888 888 888 888 d88P 888 888 888 888888 .d b. 8888888 888 888 88888b. 888 888 888888 d88P 888 888 888 888 d88 88b 888 888 888 888 "88b 888 .88P 888 d88P 888 888 888 888 888 888 888 888 888 888888K 888 d8888888888 Y88b 888 Y88b...

Vikunja: Unbounded nested task-filter recursion permits API process termination

Unbounded nested task-filter recursion permits API process termination Summary Authenticated task-list routes accept a filter expression without a length or nesting-depth bound, preprocess it, parse it recursively through fexpr, and recursively convert the resulting expression tree. A syntactical...

external_expat_AOSP10_r33_CVE-2022-23990

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...

CVE-2021-22205

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE /tmp/1.txt" batch scan python3...

CVE-2023-20052

CVE-2023-20052 CVE-2023-20052 information leak vulnerability in the DMG file parser of ClamAV A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information o...

CVE-2026-75351

A flaw was found in OpENer. An out-of-bounds read vulnerability in the server-side EtherNet/IP ForwardOpen connection-path parser allows a remote attacker to trigger an application crash. By sending a specially crafted connection request, an attacker can exploit this flaw to cause a Denial of...