3262 matches found
DeadDialect
DeadDialect Every boot speaks a different language. Yesterday's binary is today's dead code. A session-unique RISC-V ISA remapping system. Every time the system boots, it generates a fresh cryptographic permutation of the instruction set. Binaries compiled for one session are cryptographically...
CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation-
2. CVE-2026-4567 – Post-Quantum KEM Timing Side-Channel Kyber Decapsulation Overview A vulnerable implementation of the Kyber KEM decapsulation leaks secret key bits through timing differences in the ciphertext rejection step, enabling full key recovery. Severity: Critical Private Key Compromise...
CVE-2026-98634
In the Linux kernel, the following vulnerability has been resolved: scsi: sdzbc: Reject disks with too many zones sdzbcreadzones computes the number of zones with 64-bit arithmetic and stores the result in the unsigned int nrzones field of struct zoneddiskinfo, silently truncating counts that...
EUVD-2022-54499
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EUVD-2022-54503
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Qwik: Crashing any Qwik Server via Resource thenable
Summary A Qwik server in the default configuration can be crashed with one unauthenticated HTTP request. During qwik-json body parsing, ResourceSerializer.$fill$ does Promise.resolveresource.resolved. If resolved is a plain object whose .then is a QRL for an unregistered symbol, the async QRL...
GHSA-X586-XVC8-G7Q6 Qwik: Crashing any Qwik Server via Resource thenable
Summary A Qwik server in the default configuration can be crashed with one unauthenticated HTTP request. During qwik-json body parsing, ResourceSerializer.$fill$ does Promise.resolveresource.resolved. If resolved is a plain object whose .then is a QRL for an unregistered symbol, the async QRL...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: L2CAP: Fixed type confusion in l2capecredreconfrsp The function l2capecredreconfrsp casts the incoming data into the struct l2capecredconnrsp an ECRED connection response, 8 bytes long, with the result at offset 6,...
ply_exploit_rejection
Ply 3.11 Exploit Rejection This project argues that CVE‑2025‑56005 be rejected. Argument 1: The Proof of Concept does not complete sucessfully In this project the code from the proof of concept has been copied to main.py. Run the proof of concept To run the exploit ensure that you have installed ...
CVE-2026-77205
Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the same serial number are rejected as well. This can be abused to lock out legitimate peers from connecting. The...
CVE-2026-84994
Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource.resolved to Promise.resolve without first rejecting attacker-controlled thenables...
CVE-2026-84994
The Qwik JavaScript framework is vulnerable in versions prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37 . The root cause is a flaw in default server-side qwik-json deserialization where ResourceSerializer.$fill$ passes resource._resolved to Promise.resolve without rejecting atta...
CVE-2026-84994 Qwik: Crashing any Qwik Server via Resource thenable
Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource.resolved to Promise.resolve without first rejecting attacker-controlled thenables...
WS-2026-0143
vllm 0.11.1 - 0.17.1: the speculative-decoding rejection sampler sizes its per-request expansion from outputtokenids, which is empty when only allowedtokenids is set, so a request with allowedtokenids crashes the engine worker GHSA-8c65-hq7q-r7jm...
CVE-2026-107392
music-metadata is a metadata parser for audio and video media files. Prior to 11.15.0, the DSF parser handles an unrecognized chunk by calling tokenizer.ignore without awaiting the returned promise and without first rejecting a chunk size smaller than the 12-byte chunk header. A crafted DSF input...
CVE-2026-107392
The music-metadata metadata parser (versions
CVE-2026-107392: Uncaught Exception
music-metadata is a metadata parser for audio and video media files. Prior to 11.15.0, the DSF parser handles an unrecognized chunk by calling tokenizer.ignore without awaiting the returned promise and without first rejecting a chunk size smaller than the 12-byte chunk header. A crafted DSF input...
PT-2026-108172
Name of the Vulnerable Software and Affected Versions music-metadata versions prior to 11.15.0 Description The DSF parser handles unrecognized chunks by calling tokenizer.ignore without awaiting the returned promise and without rejecting chunk sizes smaller than the 12-byte chunk header. A...
NPM: vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process
NPM: vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process vulnerability discovered by ? in WordPress Npm vm2 versions = 3.12.1...