29862 matches found
EUVD-2026-30726
A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the function RANConfiguration of the file ngap/handler.go. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploit has been released to the public and ma...
CVE-2026-8781
A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the function RANConfiguration of the file ngap/handler.go. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploit has been released to the public and ma...
CVE-2026-8781 omec-project amf handler.go RANConfiguration null pointer dereference
A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the function RANConfiguration of the file ngap/handler.go. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploit has been released to the public and ma...
CVE-2026-8780 omec-project amf NGAP Message dispatcher.go memory corruption
A vulnerability was identified in omec-project amf up to 2.1.3-dev. The affected element is an unknown function of the file ngap/dispatcher.go of the component NGAP Message Handler. The manipulation leads to memory corruption. The attack may be initiated remotely. The exploit is publicly availabl...
CVE-2026-8780 omec-project amf NGAP Message dispatcher.go memory corruption
A vulnerability was identified in omec-project amf up to 2.1.3-dev. The affected element is an unknown function of the file ngap/dispatcher.go of the component NGAP Message Handler. The manipulation leads to memory corruption. The attack may be initiated remotely. The exploit is publicly availabl...
EUVD-2026-30724
A vulnerability was determined in omec-project amf up to 2.1.3-dev. Impacted is the function NGSetupRequest of the file ngap/handler.go. Executing a manipulation of the argument InformationElement can lead to memory corruption. The attack can be launched remotely. The exploit has been publicly...
CVE-2026-8779 omec-project amf handler.go NGSetupRequest memory corruption
A vulnerability was determined in omec-project amf up to 2.1.3-dev. Impacted is the function NGSetupRequest of the file ngap/handler.go. Executing a manipulation of the argument InformationElement can lead to memory corruption. The attack can be launched remotely. The exploit has been publicly...
CVE-2026-8779 omec-project amf handler.go NGSetupRequest memory corruption
A vulnerability was determined in omec-project amf up to 2.1.3-dev. Impacted is the function NGSetupRequest of the file ngap/handler.go. Executing a manipulation of the argument InformationElement can lead to memory corruption. The attack can be launched remotely. The exploit has been publicly...
CVE-2026-8779
The CVE affects omec-project AMF up to version 2.1.3-dev, specifically the NGSetupRequest function in ngap/handler.go. A manipulation of the InformationElement argument can cause memory corruption, with remote exploitation. Public disclosure of the exploit is noted. Mitigation is to upgrade to ve...
CVE-2026-8779 omec-project amf handler.go NGSetupRequest memory corruption
A vulnerability was determined in omec-project amf up to 2.1.3-dev. Impacted is the function NGSetupRequest of the file ngap/handler.go. Executing a manipulation of the argument InformationElement can lead to memory corruption. The attack can be launched remotely. The exploit has been publicly...
CVE-2026-8779
A vulnerability was determined in omec-project amf up to 2.1.3-dev. Impacted is the function NGSetupRequest of the file ngap/handler.go. Executing a manipulation of the argument InformationElement can lead to memory corruption. The attack can be launched remotely. The exploit has been publicly...
š Bichon 1.0.2 Bearer Access Token Disclosure
Bichon version 1.0.2 accepts Bearer access tokens via GET requests which has the negative side affect of being disclosed in logs, REFERER headers, and more. Bichon 1.0.2 Bearer Access Token Accepted via Query String + Logged ===================================================================...
PT-2026-41629
Name of the Vulnerable Software and Affected Versions omec-project amf versions prior to 2.2.0 Description A flaw in the RANConfiguration function within the ngap/handler.go file allows for a remote null pointer dereference, which occurs when a program attempts to read or write to a memory locati...
PT-2026-41596
Name of the Vulnerable Software and Affected Versions omec-project amf versions prior to 2.2.0 Description A memory corruption issue exists in the NGSetupRequest function within the ngap/handler.go file. A remote attacker can trigger this by manipulating the InformationElement argument...
PT-2026-41628
Name of the Vulnerable Software and Affected Versions omec-project amf versions prior to 2.2.0 Description A memory corruption issue exists in the NGAP Message Handler component, specifically within an unknown function of the ngap/dispatcher.go file. This flaw allows a remote attacker to cause...
PT-2026-41631
Name of the Vulnerable Software and Affected Versions omec-project amf versions prior to 2.2.0 Description A remote attack can lead to a null pointer dereference, which occurs when a program attempts to read or write to a memory location that is null. This issue impacts the...
PT-2026-41630
Name of the Vulnerable Software and Affected Versions omec-project amf versions prior to 2.2.0 Description A weakness in the NGAP Message Handler component, specifically within the ngap/handler.go file, allows for a null pointer dereference a situation where the software attempts to read a memory...
PT-2026-41769
Summary The Fileeditor module enforces an extension allowlist 'css','js','html','txt','json','sql','md' on content-write operations saveFile, createFile, but two destructive endpoints ā deleteFileOrFolder and renameFile ā never validate the extension of the source path. A backend user with...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
No d...
Malicious code in @tc-core/campus-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58f691cfdb7301c271067776e2e3bc260d4cbb8880345d03e840729d849b580 The package @tc-core/campus-service was found to contain malicious code. Source: ossf-package-analysis...