Lucene search
+L

126 matches found

CVE
CVE
•added 2026/10/31 5:25 p.m.•13 views

CVE-2026-120202

Highflame ramparts versions 0.8.1 through 0.8.10 are vulnerable to a security scan bypass. The vulnerability exists because the collect_bundle_siblings and walk_bundle_subdir functions skip nested directories and .pyc files. This allows attackers to hide malicious payloads by distributing a skill...

7.1CVSS5.9AI score0.00287EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/31 5:25 p.m.•5 views

EUVD-2026-114723

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collectbundlesiblings and walkbundlesubdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc und...

7.1CVSS5.9AI score0.00287EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/31 5:25 p.m.•22 views

CVE-2026-120202 Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collectbundlesiblings and walkbundlesubdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc und...

7.1CVSS0.00287EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/10/31 5:25 p.m.•6 views

CVE-2026-120202 Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collectbundlesiblings and walkbundlesubdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc und...

7.1CVSS6AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/31 12:00 a.m.•4 views

CVE-2026-120202: highflame-ai ramparts: Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide…

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collectbundlesiblings and walkbundlesubdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc und...

7.1CVSS6AI score0.00287EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/24 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-81878

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable...

5.5CVSS6.6AI score0.00202EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2026/09/23 5:00 p.m.•29 views

SUSE CVE-2026-81878

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...

5.5CVSS6.9AI score0.00202EPSS
SaveExploits1References3
NVD
NVD
•added 2026/09/22 4:18 p.m.•24 views

CVE-2026-81878

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...

5.5CVSS0.00202EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2026/09/22 4:18 p.m.•20 views

CVE-2026-81878

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...

5.5CVSS6.8AI score0.00202EPSS
SaveExploits1References6
osv_ubuntu
osv_ubuntu
•added 2026/09/22 4:18 p.m.•27 views

UBUNTU-CVE-2026-81878

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...

5.5CVSS6.9AI score0.00202EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2026/09/22 3:07 p.m.•48 views

CVE-2026-81878 radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...

5.5CVSS0.00202EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/09/22 3:07 p.m.•16 views

CVE-2026-81878 radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...

5.5CVSS6.9AI score0.00202EPSS
SaveExploits1References5
CVE
CVE
•added 2026/09/22 3:07 p.m.•38 views

CVE-2026-81878

radare2 , a UNIX-like reverse engineering framework, is affected by an integer overflow in its CPython bytecode .pyc marshal parser prior to version 6.2.0 . The root cause is that the marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocati...

5.5CVSS6.9AI score0.00202EPSS
SaveExploits1References5Affected Software1
AlpineLinux
AlpineLinux
•added 2026/09/22 3:07 p.m.•18 views

CVE-2026-81878

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...

5.5CVSS6.9AI score0.00202EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2026/09/22 3:07 p.m.•27 views

CVE-2026-81878 radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...

5.5CVSS7AI score
SaveExploits0References7
EUVD
EUVD
•added 2026/09/22 3:07 p.m.•17 views

EUVD-2026-84503

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...

5.5CVSS6.9AI score0.00202EPSS
SaveExploits1References5
Mend
Mend
•added 2026/09/22 3:07 p.m.•9 views

CVE-2026-81878

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...

6.8CVSS6.9AI score0.00202EPSS
SaveExploits1References7
Debian CVE
Debian CVE
•added 2026/09/22 3:07 p.m.•24 views

CVE-2026-81878

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...

5.5CVSS6.9AI score0.00202EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•14 views

CVE-2026-81878: Integer Overflow or Wraparound

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...

5.5CVSS6.9AI score0.00202EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•14 views

PT-2026-96774

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 6.2.0 Description The CPython bytecode .pyc marshal parser in radare2 contains a flaw where marshal readers accept a 32-bit string length without validating if the value overflows the size-plus-one allocation. When...

5.5CVSS6.5AI score0.00202EPSS
SaveExploits1References10
Rows per page
Query Builder