CVE-2024-29050

CVE-2024-29050 CVE-2024-29050는 Windows 암호화 서비스, 특히 암호화 작업 중 인증서가 처리되는 방식의 보안 취약점입니다. 이 문제는 파일 크기나 버퍼 길이와 같은 데이터에 대한 계산이 변수의 허용 가능한 한계를 초과하여 시스템이 메모리를 잘못 계산하거나 잘못 관리하게 되는 정수 오버플로우에서 비롯됩니다. 이 경우 암호화 함수가 특정 인증서 데이터를 잘못 처리하여 부적절한 메모리 관리가 발생합니다. 공격자는 특수하게 조작된 입력예: 과도하게 큰 인증서나 조작된 데이터 필드을 시스템에 제공하여 시스템...

CVE-2021-29440

CVE-2021-29440 Grav CMS 1.7.10 の静的ページの安全でない Twig 処理による RCE Grav はファイルベースのWebプラットフォームです。静的ページの Twig 処理は、ページの作成または編集を許可された管理ユーザーであれば誰でもフロントマターで有効にできます。Twig プロセッサはサンドボックス化されずに実行されるため、この動作を利用して任意のコード実行を達成し、インスタンス上の権限を昇格させることができます。 解説 /admin ダッシュボードにアクセスでき、ページ作成権限を持つユーザーが必要です。 フロントマターブロックは process.twi...

CVE-2018-15473

CVE-2018-15473 원인 OpenSSH 서버는 요청이 포함된 패킷을 완전히 파싱하기 전에 유효하지 않은 사용자의 인증 처리를 지연시키지 않습니다. 이 취약점은 auth2-gss.c, auth2-hostbased.c, auth2-pubkey.c와 관련됩니다. 악용 이 취약점은 유효한 사용자 이름 목록을 생성하는 데 사용할 수 없지만, 여전히 사용자 이름을 열거하고 추측하는 데 사용할 수 있습니다. 영향을 받는 버전 OpenSSH = 7.7 영향을 받지 않는 버전 openssh-7.8p1-1.fc28...

CVE-2026-100649

A flaw was found in vLLM. An unauthenticated remote attacker can cause a Denial of Service DoS by submitting video processing requests that specify different sampler subclasses. Because active decoder counters are tracked independently across subclasses rather than globally, requests can bypass...

CVE-2026-100648

A flaw was found in vllm. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by bypassing file size restrictions during multimodal chat audio processing. By submitting requests with oversized audio files, an attacker can force the server to allocate...

CVE-2026-100592 OpenClaw before 2026.7.1 Authentication Bypass via Memory Dreaming

OpenClaw is an agent gateway distributed via npm. In versions = 2026.4.10 and 2026.7.1, persistent memory dreaming mutations omit owner permission checks. An authorized but non-owner external-channel sender can issue the persistent '/dreaming on' and '/dreaming off' commands to enable or disable...

CVE-2026-56727

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary In Zammad's inbound PGP email processing, the return value of the gpg verification call was silently discarded. Regardless of whether gpg reported a valid, invalid, or missing signature, the handler...

EUVD-2026-87214

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary In Zammad's inbound PGP email processing, the return value of the gpg verification call was silently discarded. Regardless of whether gpg reported a valid, invalid, or missing signature, the handler...

CVE-2026-56727 Zammad: PGP signature spoofing via unvalidated verification return

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary In Zammad's inbound PGP email processing, the return value of the gpg verification call was silently discarded. Regardless of whether gpg reported a valid, invalid, or missing signature, the handler...

CVE-2026-56727

The open-source helpdesk system Zammad is vulnerable to PGP signature spoofing prior to version 7.0.2 . The root cause is that the system silently discards the return value of the gpg verification call during inbound PGP email processing. Consequently, the handler unconditionally writes a success...

CVE-2026-92564

The Apache Qpid Broker-J (versions through 10.1.0 ) is vulnerable to a Denial of Service (DoS) condition via unbounded type nesting . An unauthenticated remote attacker can send specially crafted messages containing deeply nested data structures during AMQP 0-8/0-9/0-9-1 field-table processing. B...

CVE-2026-92564 Apache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

PT-2026-98941

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.0.2 Description In the inbound PGP email processing, the return value of the gpg verification call is silently discarded. The handler unconditionally marks the security preferences of the article as having a successf...

Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 24.04 LTS / 26.04 LTS : libass vulnerabilities (USN-8815-1)

The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8815-1 advisory. It was discovered that libass incorrectly handled parsing operations for specific nested character string...

CVE-2026-87118

The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with adjacent network access could submit crafted command data that corrupts memory, potentially disrupting authentication state or causing the...

CVE-2026-87118 Botslab G980H Dashcams Out-of-bounds Write

The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with adjacent network access could submit crafted command data that corrupts memory, potentially disrupting authentication state or causing the...

EUVD-2026-86462

The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with adjacent network access could submit crafted command data that corrupts memory, potentially disrupting authentication state or causing the...

CVE-2026-87118

The Botslab G980H dash camera firmware is susceptible to an out-of-bounds write vulnerability within its command processing functionality . An authenticated attacker with adjacent network access can submit crafted command data to corrupt memory. This could lead to the disruption of the authentica...

CVE-2026-87118 Botslab G980H Dashcams Out-of-bounds Write

The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with adjacent network access could submit crafted command data that corrupts memory, potentially disrupting authentication state or causing the...

USN-8815-1 libass vulnerabilities

It was discovered that libass incorrectly handled parsing operations for specific nested character strings. An attacker could use this issue to cause libass to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,...