Lucene search
+L

128197 matches found

CVE
CVE
added 2026/09/10 10:52 a.m.10 views

CVE-2026-87961

ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read in the read_ID3_Header function, caused by a shadowed length parameter during ID3 synchronized-lyrics processing. An attacker can craft malicious MP3 files or HTTP audio streams with oversized frame size declarati...

7.1CVSS6AI score0.00268EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/10 10:52 a.m.11 views

CVE-2026-87961 ESP32-audioI2S 3.4.4 through 4.0.0 Heap-based Out-of-Bounds Read via Shadowed Length Parameter in read_ID3_Header

ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read vulnerability in the readID3Header function due to a shadowed length parameter in ID3 synchronized-lyrics processing. Attackers can craft malicious MP3 files or HTTP audio streams with oversized frame size...

7.1CVSS6.1AI score
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2026/09/10 10:38 a.m.11 views

CVE-2026-59985

A flaw was found in OpenEXR. A remote attacker could provide a specially crafted RLE-compressed EXR image, which causes a 64-bit unpacked size to truncate before memory allocation. This leads to a heap out-of-bounds read when unpack32bit attempts to read beyond the allocated buffer. Successful...

5.5CVSS5.8AI score0.0018EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/10 10:14 a.m.7 views

mongobleed

mongobleed CVE-2025-14847 是针对 MongoDB 通过 OPCOMPRESSED 缓冲区过度读取(buffer over-read)导致堆内存泄露的漏洞利用工具。 用法 root@kitploit: $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default: 27017 --min-offset MIN Min doc length...

8.7CVSS7.9AI score0.83218EPSS
SaveExploits39References1
RedhatCVE
RedhatCVE
added 2026/09/10 10:08 a.m.11 views

CVE-2026-87823

A flaw was found in zstd-jni. This vulnerability arises from insufficient bounds checks in direct-ByteBuffer frame-size native methods, which allows attackers to provide negative or overflowing offsets. A remote attacker can exploit this by supplying specially crafted negative offset values,...

8.8CVSS5.9AI score0.00432EPSS
SaveExploits0References11
OSV
OSV
added 2026/09/10 9:45 a.m.7 views

PYSEC-2026-3940 weasyprint Has Server-Side Request Forgery (SSRF)

Summary urlfetcher is WeasyPrint's documented mechanism for restricting resource loading - applications use it to block file://, internal hosts, etc. when rendering untrusted input. Two writepdf channels ignore the document's urlfetcher and build a fresh default URLFetcher instead. A restrictive...

6.2CVSS5.8AI score0.0019EPSS
SaveExploits0References6
PyPA
PyPA
added 2026/09/10 9:45 a.m.8 views

weasyprint Has Server-Side Request Forgery (SSRF)

Summaryurlfetcher is WeasyPrint's documented mechanism for restricting resource loading - applications use it to block file://, internal hosts, etc. when rendering untrusted input.Two writepdf channels ignore the document's urlfetcher and build a fresh default URLFetcher instead. A restrictive...

6.2CVSS5.8AI score0.0019EPSS
SaveExploits0References6Affected Software1
Kitploit
Kitploit
added 2026/09/10 9:40 a.m.10 views

CVE-2024-21545-PoC

CVE-2024-21545-PoC Proxmox VE 任意文件读取 - 完全系统沦陷。尚未测试...本周将进行测试。...

8.2CVSS7.7AI score0.00363EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 9:33 a.m.8 views

CVE-2025-68705

CVE-2025-68705 - RustFS 路径遍历漏洞利用工具 描述 该脚本利用了 RustFS 中的一个路径遍历漏洞(CVE-2025-68705),可允许读取服务器上的任意文件。 环境要求 Python 3.6+ 依赖项见 requirements.txt 安装 root@kitploit: git clone https://github.com/yourusername/CVE-2025-68705.git cd CVE-2025-68705 pip install -r requirements.txt 使用方法 root@kitploit: python exp.py ...

9.8CVSS6.1AI score0.07427EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2026/09/10 9:32 a.m.12 views

CVE-2026-87824

A flaw was found in zstd-jni. Attackers can exploit this by supplying oversized per-sample lengths to the Zstd.trainFromBufferDirect function, which fails to validate the samples buffer capacity. This allows for reading past buffer boundaries, leading to out-of-bounds memory access and ultimately...

8.7CVSS7.2AI score0.00389EPSS
SaveExploits0References11
RedHat Linux
RedHat Linux
added 2026/09/10 9:27 a.m.8 views

vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator

A flaw was found in Vim. A remote attacker could exploit a heap-based buffer overflow and an out-of-bounds read vulnerability in Vim's terminal emulator. This occurs when processing specially crafted Unicode supplementary plane characters, potentially leading to information disclosure and denial ...

4.4CVSS5.9AI score0.00177EPSS
SaveExploits0References7
NVD
NVD
added 2026/09/10 9:17 a.m.10 views

CVE-2026-88288

GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote user with valid web credentials to read arbitrary files accessible to the root-run web service...

6.5CVSS0.00366EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/10 9:17 a.m.9 views

CVE-2026-42806

An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI C-driver in version v1.0.3 and prior, specifically within the field data parsing logic in readallfielddata bme69x.c. The driver prefetches heater configuration registers into a contiguous 30-byte stack buffer setval...

4.3CVSS0.00154EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/10 9:04 a.m.9 views

EUVD-2026-75362

An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI C-driver in version v1.0.3 and prior, specifically within the field data parsing logic in readallfielddata bme69x.c. The driver prefetches heater configuration registers into a contiguous 30-byte stack buffer setval...

4.3CVSS5.9AI score0.00154EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 9:04 a.m.13 views

CVE-2026-42806

An out-of-bounds read vulnerability exists in the Bosch BME690 SensorAPI C-driver (v1.0.3 and prior) within the read_all_field_data function (bme69x.c). The driver prefetches heater configuration registers into a 30-byte stack buffer, but the gas_index field is extracted with a 4-bit mask (0–15) ...

4.3CVSS5.9AI score0.00154EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 9:04 a.m.39 views

CVE-2026-42806

An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI C-driver in version v1.0.3 and prior, specifically within the field data parsing logic in readallfielddata bme69x.c. The driver prefetches heater configuration registers into a contiguous 30-byte stack buffer setval...

4.3CVSS0.00154EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/09/10 8:40 a.m.15 views

CVE-2026-88264

A flaw was found in crun. When the container configuration does not give /dev a dedicated mount, terminal setup can redirect /dev/console onto an attacker-controlled path, including via the read-only-rootfs bind-mount fallback. Affected versions are crun 1.29.1 and earlier. Default configurations...

5.6CVSS5.5AI score0.00117EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/10 8:25 a.m.38 views

CVE-2026-88288 GV-LPC2011/LPC2211 - Arbitrary File Read Through BKDownloadLink.cgi Symlink Creation

GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote user with valid web credentials to read arbitrary files accessible to the root-run web service...

6.5CVSS0.00366EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 8:25 a.m.12 views

CVE-2026-88288

GeoVision GV-LPC2211 (also listed as GV-LPC2011) version V1.13 is affected by an arbitrary file read vulnerability in the BKDownloadLink.cgi endpoint. The root cause is a failure to restrict the filename parameter supplied to the CGI script, which allows a remote user with valid web credentials t...

6.5CVSS5.9AI score0.00366EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/10 8:25 a.m.11 views

EUVD-2026-75323

GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote user with valid web credentials to read arbitrary files accessible to the root-run web service...

6.5CVSS5.9AI score0.00366EPSS
SaveExploits0References1
Rows per page
Query Builder