291345 matches found
CVE-2026-49879
In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28662
In p2pprocessprovdiscbootstrapreq of p2ppd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28609
In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28618
In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28604
In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
Microsoft and Adobe Patch Tuesday, September 2026 Security Update Review
Microsoft kicks off September with its monthly Patch Tuesday release, delivering fixes for security vulnerabilities affecting its products. The security updates are packed with security fixes, providing organizations with important updates to help protect their environments from emerging threats...
Malicious code in punypump (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e56cc14096d20f679823bf15af9f44dff039e01f23d2082eba8020200d04a7f The package presents itself as a console shim index.js is a verbatim copy of console-browserify with description 'Emulate console for all the...
MAL-2026-16048 Malicious code in punypump (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e56cc14096d20f679823bf15af9f44dff039e01f23d2082eba8020200d04a7f The package presents itself as a console shim index.js is a verbatim copy of console-browserify with description 'Emulate console for all the...
CVE-2026-85384 Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Import
A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger th...
CVE-2026-85384
A stack-based buffer overflow exists in the httpd component of the TP-Link RE210 AC750 , caused by improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger...
EUVD-2026-73942
A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger th...
Exploit for Deserialization of Untrusted Data in Devcode Openstamanager
CVE-2026-29782 — OpenSTAManager auth-SQLi → PHP object injecti...
GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE
CWE: CWE-88 Argument Injection / CWE-94 Code Injection — via a read-then-corrupt-on-rewrite config round trip, not a direct setter argument - Affected component: git/config.py — GitConfigParser.read multi-line value decoding, lines 444-541, esp. stringdecode at line 460 and its call sites at...
Duplicate Advisory: Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-63gh-g2x5-x69v. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
Duplicate Advisory: Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2j8r-3c22-8565. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
EUVD-2026-74044
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network...
CVE-2026-66302
CVE-2026-66302 is a CRITICAL vulnerability (CVSS 9.8) in Skype for Business Server caused by external control of file name or path , allowing an unauthorized attacker to achieve remote code execution over the network with no privileges or user interaction. Affected products include Skype for Busi...
CVE-2026-85877
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network...