173809 matches found
CVE-2026-39363
CVE-2026-39363 — Произвольное чтение файлов через WebSocket Vite Dev Server массовое сканирование Отказ от ответственности: Этот инструмент предназначен только для авторизованного тестирования безопасности и образовательных исследований. Пользователь обязан соблюдать местные законы и нормативные...
CVE-2026-26336-PoC
CVE-2026-26336 — Неавторизованное чтение файлов в Alfresco Share Обзор Alfresco Share предоставляет конечную точку /share/page/resource/, используемую для обслуживания статических ресурсов. В уязвимых версиях эта конечная точка не ограничивает должным образом обход пути path traversal, что...
CVE-2026-7482-PoC
CVE-2026-7482: Выход за границы кучи при чтении в Ollama 1-Day PoC Этот репозиторий содержит 1-day Proof of Concept PoC цепочку эксплуатации для CVE-2026-7482 — неаутентифицированную уязвимость чтения за пределами границ OOB Read в загрузчике моделей GGUF в Ollama версии до 0.17.1. Примечание: Эт...
CVE-2026-106428
An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...
CVE-2026-82334
IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser within the Windows S-TAP component . A remote attacker can exploit this by sending a specially crafted TDS LOGIN7 packet containing invalid offset or len...
CVE-2026-82334 IBM Guardium Data Protection Out-of-bounds Read
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of...
EUVD-2026-95249
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of...
CVE-2021-43798
CVE-2021-43798 par Privacy Hunter Versions affectées : Grafana 8.0.0-beta1 à 8.3.0 à l'exception des versions corrigées Type de vulnérabilité : Directory Traversal Parcours de répertoire Niveau de gravité : Critique Critical Plateforme : Grafana plateforme open-source de monitoring et...
CVE-2026-106437 Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver
The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...
CVE-2026-106437
The MongoDB C Driver contains an out-of-bounds read and write vulnerability within its BSON buffer-reservation API. The root cause is an integer underflow (CWE-191) that occurs when the API records a length smaller than the five-byte BSON minimum. Subsequent append or comparison operations can tr...
CVE-2026-106437 Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver
The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...
Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver
The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...
EUVD-2026-95144
An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...
CVE-2026-106428
The MongoDB C Driver is vulnerable to an out-of-bounds read during SCRAM authentication response parsing . Specifically, processing a malformed server-final message can cause the driver to read one byte beyond a fixed-size buffer. A server or network intermediary capable of providing this message...
CVE-2026-106428
An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...
CVE-2026-106428 Out-of-bounds read in SCRAM response parsing in MongoDB C Driver
An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...
Out-of-bounds read in SCRAM response parsing in MongoDB C Driver
An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...
CVE-2021-21017
CVE-2021-21017 Ещё один баг с порядком байтов в Adobe Reader : Плагин IA32, вер. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl != char 0x0 &&...
desc_race-1
descrace Эксплойт "descrace" CVE-2021-30955 для iOS 15.0 - 15.1.1 со стабильными примитивами чтения/записи в ядре Метод эксплуатации 1. Увеличьте ёмкость массива IOSurfaceClient до 0x2000, цель — записать указатель, содержимое которого полностью контролируется, а затем использовать интерфейсы...
CVE-2026-41551
Воспроизведение CVE-2026-41551 Уязвимость: обход относительного пути в сервисах fileserver / fileserver2 Siemens ROS CVSS v3.1: 9.1 AV:N / AC:L / PR:N / UI:N / S:U / C:H / I:H / A:N Затронутые версии: все версии ros-sharp name.substr10; // удаляем "package://" std::string package = address.substr...