182 matches found
cve-2011-4862
cve-2011-4862 当初、diffを使ってパッチを作成しようとしました。 実際のパッチを見る前に、自分の考えた方法でパッチを当てました。 encrypt.patch は、その diff で作成したオリジナルのパッチです。 しかし、このパッチを freeBSD に適用しようとしたところ、受け入れられませんでした。 代わりに、実際のパッチを取得する必要がありました。そして、私が当初考えていた方法で修正を実装するようにパッチを変更しました。これが機能するのは、パッチ全体のパスをパッチに含めるからです。 パッチでは、単純に長さを MAXLENGTH と比較します。 それより大きい場合は、...
CVE-2026-67215
cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtilsApplyPatches or cJSONUtilsApplyPatchesCaseSensitive. A patch containing add and copy operations grafts duplicated subtrees to amplify document...
PT-2026-65813
Name of the Vulnerable Software and Affected Versions cJSON versions prior to 1.7.20 Description The issue involves uncontrolled recursion in the cJSONUtils ApplyPatches and cJSONUtils ApplyPatchesCaseSensitive functions. When an untrusted RFC 6902 JSON Patch is applied, an attacker can use add a...
UBUNTU-CVE-2026-15185
A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsubreadidx of the file /src/mediatools/vobsub.c of the component MP4Box. Executing a manipulation of the argument numlangs can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been...
Directory Traversal
Overview pnpm is a Fast, disk space efficient package manager Affected versions of this package are vulnerable to Directory Traversal via the patch application process. An attacker can overwrite or delete arbitrary files on the filesystem by submitting a malicious .patch file containing crafted...
CVE-2026-50015 pnpm: Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)
pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's patch application pipeline @pnpm/patch-package performs no path validation on file paths extracted from .patch files. An attacker who contributes a malicious patch file via a pull request can write attacker-controlled content to or...
CVE-2026-50015
pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's patch application pipeline @pnpm/patch-package performs no path validation on file paths extracted from .patch files. An attacker who contributes a malicious patch file via a pull request can write attacker-controlled content to or...
CVE-2026-50015: Improper Limitation of a Pathname to a Restricted Directory
pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's patch application pipeline @pnpm/patch-package performs no path validation on file paths extracted from .patch files. An attacker who contributes a malicious patch file via a pull request can write attacker-controlled content to or...
CVE-2026-54421
In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information such as iSCSI credentials. The PATCH outcome is a security issue; the POST outcome is not a security issue...
Exploit for CVE-2017-0144
EternalBlue-DoublePulsar-Exploit-Demonstration Cybersecurity l...
PT-2026-29837
A vulnerability has been found in Free5GC 4.2.0. The affected element is an unknown function of the component aper. Such manipulation leads to type confusion. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is described as difficult. The...
Exploit for CVE-2026-21385
Qualcomm Vulnerability Scanner The Qualcomm Vulnerability Scan...
Exploit for CVE-2026-21385
Qualcomm Vulnerability Scanner The Qualcomm Vulnerability Scan...
Mura/Masa CMS - SQL Injection
The Mura/Masa CMS is vulnerable to SQL Injection. id: CVE-2024-32640 info: name: Mura/Masa CMS - SQL Injection author: iamnoooob,rootxharsh,pdresearch severity: critical description: | The Mura/Masa CMS is vulnerable to SQL Injection. impact: | Successful exploitation could lead to unauthorized...
CVE-2023-43744
An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an administrator to execute arbitrary OS commands via a file name parameter in a patch application function. The Zult...
EUVD-2014-1233
Malware in sbrugna...
EUVD-2015-1039
Malware in sbrugna...
EUVD-2015-1059
Malware in sbrugna...