11 matches found
repomix: attach_packed_output can bypass file-read secret scanning for supported local files
attachpackedoutput can register arbitrary .json/.txt/.md/.xml files and bypass the MCP file-read safety check Summary Repomix's MCP server exposes a normal filesystemreadfile tool that reads absolute paths only after running the project's secret check. However, the attachpackedoutput plus...
Adobe InDesign Desktop Buffer Overflow Vulnerability (CNVD-2026-24183)
Adobe InDesign Desktop is a professional desktop publishing and design software, primarily used for page layout, graphic design, and publishing in print and digital media. There is a security vulnerability in Adobe InDesign Desktop. This vulnerability stems from an improper validation of the read...
Linux blk_iocost Heap Buffer Overflow DoS
The vulnerability of the iocforgivedebts function in the blkiocost component of the Linux operating system is related to read-out errors beyond the boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux drm_dp_decode_sideband_msg_hdr Heap Buffer Overflow DoS
The vulnerability of the drmdpdecodesidebandmsghdr function in the Linux operating system is related to read misses beyond the boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Network DoS
The vulnerability of the ethtoolgetPhyStatsethtool function in the Linux kernel’s network subsystem is related to read misses beyond the boundary. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel arm64 DoS
The vulnerability of the arm64 component of the Linux operating system’s kernel is related to errors in read operations beyond the boundary in the function ctrencrypt. Exploiting this vulnerability can allow an attacker to cause a service failure...
nct6775 Component DoS
The vulnerability of the nct6775 component in the Linux operating system is related to read misses beyond the buffer boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2023-26366 Validate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918)
Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...
SUSE CVE-2002-1146
The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libresolv, use the maximum buffer size instead of the actual size when processing a DNS response, which causes the stub resolvers to read past the actual boundary "read buffer...
