1562 matches found
CVE-2026-28666
In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-74016
In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-55256
CVE-2026-55256 is a persistent denial of service vulnerability in the parsePartHeaders function across multiple files in Android , caused by improper input validation . A remote attacker with low privileges can trigger a denial of service without user interaction. The CVSS v3.1 score is 6.5 (Medi...
CVE-2026-45527
CVE-2026-45527 is an integer overflow (CWE-190) in the convertCleanApertureToRect function of HeifCleanAperture.cpp within the Android Media Framework component, affecting Android 14, 15, and 16 . The flaw allows a remote denial of service with low privileges required and no user interaction need...
EUVD-2026-74002
In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28666
CVE-2026-28666 affects Android (identified via ASB-A-501447778 and the 2026-09-01 Android Security Bulletin). The vulnerability resides in multiple functions of LocalImageResolver.java , where a DNG image rendering check bypass enables a Remote Persistent Denial of Service that can escalate to re...
kernel: flow_dissector: do not dissect PPPoE PFC frames
A flaw was found in the Linux kernel's flow dissector. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending a specially crafted Point-to-Point Protocol over Ethernet PPPoE Protocol Field Compression PFC frame to an affected system. The incorrect processing of...
EUVD-2026-72638
A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function addentry of the file src/meta/txtpparser.c of the component txtp. Such manipulation of the argument rangestart/rangeend leads to resource consumption. The attack may be performed from remote. The exploit...
CVE-2026-86511 java-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumption
A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge/jackson/JacksonUtils.java. Performing a manipulation results in resource consumption. The attack may be initiated...
CVE-2026-27654
CVE-2026-27654 NGINX ngxhttpdavmodule Desbordamiento de búfer en el montón mediante subdesbordamiento de sizet Denegación de servicio remota / Potencial ejecución remota de código Descripción ngxhttpdavcopymovehandler en src/http/modules/ngxhttpdavmodule.c calcula la longitud de la URI de destino...
AirDroidPwner
AirDroidPwner CVE-2019-9599 Este exploit ya no es funcional Video PoC Exploit: https://www.youtube.com/watch?v=0QDM2246DM CVE: https://nvd.nist.gov/vuln/detail/CVE-2019-9599 Exploit-db: https://www.exploit-db.com/exploits/46337 ¿Qué es AirDroid? AirDroid es una de las herramientas más conocidas y...
CVE_2020_0796_CNA
CVE-2020-0796-CNA Modified based on the PoC provided by danigargu, implemented privilege escalation replication on Windows 10, and developed AggressorScripts based on the Reflective DLL project by stephenfewer and the interface provided by CobaltStrike documentation. This repository is only for...
CVE-2026-20503
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...
EUVD-2026-72196
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...
ROS-20260907-73-0524
The vulnerability in Java 1.8.0-openjdk is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260907-73-0526
The vulnerability in Java-17-openJDK is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260907-73-0501
The vulnerability of the mbregexuringencoding function in the PHP interpreter is related to discrepancies in the lists of encodings between the Oniguruma library and mbfl, as a result of a pointer assignment error. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260907-73-0525
The vulnerability in Java-11-openjdk is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Linux Distros Unpatched Vulnerability : CVE-2026-80821
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: pci-epf: put CQ ref on createcq mapping failure nvmetpciepfcreatecq calls nvmetcqcreate, which takes a reference on the controller and installs the...