605623 matches found
Uncontrolled recursion DoS in JustHTML() via deeply nested HTML
Summaryjusthtml through 1.9.1 allows denial of service via deeply nested HTML. During parsing, JustHTML.init always reaches TreeBuilder.finish, which unconditionally calls populateselectedcontent. That function recursively traverses the DOM via findelements / findelement without a depth bound,...
ONNX: TOCTOU arbitrary file read/write in save_external_dat
SummaryThe saveexternaldata method seems to include multiple issues introducing a local TOCTOU vulnerability, an arbitrary file read/write on any system. It potentially includes a path validation bypass on Windows systems.Regarding the TOCTOU, an attacker seems to be able to overwrite victim's...
PYSEC-2026-3854 Uncontrolled recursion DoS in JustHTML() via deeply nested HTML
Summary justhtml through 1.9.1 allows denial of service via deeply nested HTML. During parsing, JustHTML.init always reaches TreeBuilder.finish, which unconditionally calls populateselectedcontent. That function recursively traverses the DOM via findelements / findelement without a depth bound,...
CVE-2025-65346
CVE-2025-65346 โ Authenticated Path Traversal From UnZip Function Leading to Arbitrary File Write in laravel-file-manager v3.3.1 ๐งญ Overview A Path Traversal vulnerability in the unzip/extract functionality of the affected application allows an attacker to write files to arbitrary filesystem...
CVE-2007-2447
CVE-2007-2447 Samba Exploit A standalone Rust implementation of the CVE-2007-2447 exploit targeting Samba smbd 3.0.20-Debian. Vulnerability Description CVE-2007-2447 is a command injection vulnerability in Samba versions 3.0.0 through 3.0.25rc3. The vulnerability exists in the SamrChangePassword...
CVE-2025-68613-poc-via-copilot
โ CVE-2025-68613 n8n ่กจ่พพๅผๆณจๅ ฅ RCE ๆผๆดๅฎๆดๅๆ ๆฅๆ : 2024ๅนด12ๆ23ๆฅ ็ถๆ : โ RCE ๅฎๅ จ้ช่ฏๆๅ CVSS ่ฏๅ : 10.0 ไธฅ้ ๐ ๆๅ็ RCE ๆๆ่ฝฝ่ท root@kitploit: function var require = this.process.mainModule.require; var execSync = require'childprocess'; return execSync'id', encoding: 'utf8'.trim; ๆง่ก็ปๆ : ๆๅ่ฟๅ็ณป็ป็จๆทไฟกๆฏ๏ผๅฆ uid=1000n8n...
CVE-2026-87824
A flaw was found in zstd-jni. Attackers can exploit this by supplying oversized per-sample lengths to the Zstd.trainFromBufferDirect function, which fails to validate the samples buffer capacity. This allows for reading past buffer boundaries, leading to out-of-bounds memory access and ultimately...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1235944. CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. CVE-2025-7107...
SUSE-SU-2026:4120-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1235944. - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. -...
vim: Vim: Heap buffer overflow allows arbitrary code execution
A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the setsofo function fails to reset internal data between sections, leading to an out-of-bounds write...
vim: Vim: Arbitrary command execution via crafted vimball
A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimballRmVimball function...
vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding
An out-of-bounds write vulnerability in Vim's spellsoundfoldsal function allows an attacker to corrupt memory and crash the editor Denial of Service by supplying a specially crafted word during spell sound-folding...
EUVD-2026-75365
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Slider field in User Profile settings in versions up to and including 4.5.13.1. This is due to insufficient input sanitization in the usermetasave function which only sanitizes array values, not scalar...
CVE-2026-5399 Redux Framework <= 4.5.13.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Slider Field Value
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Slider field in User Profile settings in versions up to and including 4.5.13.1. This is due to insufficient input sanitization in the usermetasave function which only sanitizes array values, not scalar...
CVE-2026-5399 Redux Framework <= 4.5.13.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Slider Field Value
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Slider field in User Profile settings in versions up to and including 4.5.13.1. This is due to insufficient input sanitization in the usermetasave function which only sanitizes array values, not scalar...
CVE-2026-5399
The Redux Framework WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) via the Slider field in User Profile settings in versions up to and including 4.5.13.1 . The root cause involves three factors: insufficient input sanitization in the user_meta_save() function (which only sani...
CVE-2026-5118
CVE-2026-5118 โ Divi Form Builder = 5.1.2 โ Unauthenticated Privilege Escalation via Role Injection ๐ฅ Vulnerability Summary The WordPress plugin Divi Form Builder versions = 5.1.2 is vulnerable to an unauthenticated privilege escalation vulnerability. This critical flaw allows unauthenticated...
apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation
A flaw was found in Apache Portable Runtime Utility apr-util. The aprpasswordvalidate function does not perform constant-time comparisons for hashes or passwords. This vulnerability allows a remote attacker to conduct a timing attack, particularly on platforms without crypt such as Windows, BeOS,...
apr-util: Apache Portable Runtime Utility: Denial of Service via XML stack recursion attack
A flaw was found in Apache Portable Runtime Utility apr-util. A remote attacker could exploit a stack recursion vulnerability by providing specially crafted XML input to a library consumer that uses the aprxmlquoteelem function. This could lead to a denial of service DoS due to an application cra...
CVE-2026-42805
A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI C library within the debug message parser function bhi385parsedebugmessage located in bhi385parse.c. The function parses FIFO events and extracts an 8-bit message length directly from the attacker-controlle...