Lucene search
+L

1169 matches found

NVD
NVD
added 2026/09/22 12:17 p.m.9 views

CVE-2026-87119

Authentication Bypass by Capture-replay in ZenHive mpp allows an attacker holding a captured subscription activation credential to charge the payer repeatedly. The payer signs a Tempo KeyAuthorization over the chain id, key type, key id, expiry, limits and scopes only, with nothing tying it to th...

8.2CVSS0.00574EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/22 11:16 a.m.10 views

CVE-2026-87119

CVE-2026-87119 is an authentication bypass by capture-replay in ZenHive mpp (Elixir), affecting versions 0.14.0 through 0.16.1 . The root cause lies in MPP.Methods.Tempo.KeyAuthorization.verify/3: the payer signs a Tempo KeyAuthorization over the chain id, key type, key id, expiry, limits, and sc...

8.2CVSS5.8AI score0.00574EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/20 1:12 a.m.10 views

hexcymatix

hexcymatix hexcymatix is an exploratory research project, loosely envisioned as a binary reverse engineering tool for extracting structural information from repeated byte patterns in binary files. The idea never materialized into a usable tool, but still yields some fascinating representations of...

6AI score
SaveExploits0
NVD
NVD
added 2026/09/18 4:17 p.m.11 views

CVE-2026-84447

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden reference graphs can repeatedly decode the same base image because processedids is copied per branch and ImageItem::decodeimage has no shared operation budget. This vulnerability is fix...

7.5CVSS0.00524EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/18 4:17 p.m.4 views

UBUNTU-CVE-2026-84447

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden reference graphs can repeatedly decode the same base image because processedids is copied per branch and ImageItem::decodeimage has no shared operation budget. This vulnerability is fix...

7.5CVSS5.8AI score0.00524EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/18 4:00 p.m.8 views

EUVD-2026-83023

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden reference graphs can repeatedly decode the same base image because processedids is copied per branch and ImageItem::decodeimage has no shared operation budget. This vulnerability is fix...

7.5CVSS5.8AI score0.00524EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/18 4:00 p.m.27 views

CVE-2026-84447

libheif (HEIF/AVIF decoder/encoder) versions 1.23.1 and earlier are affected by a CPU/memory amplification denial-of-service vulnerability. Crafted grid , iovl , and iden reference graphs can repeatedly decode the same base image because processed_ids is copied per branch and ImageItem::decode_im...

7.5CVSS5.8AI score0.00524EPSS
SaveExploits0References3
Redos
Redos
added 2026/09/18 12:00 a.m.2 views

ROS-20260918-73-0022

The vulnerability in the drivers/infiniband/core/umemdmabuf.c component of the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS7.2AI score0.00139EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/09/17 4:07 p.m.33 views

CVE-2026-90249 iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core does not filter duplicate writes to the event enable attribute, so writing the same value twice invokes writeeventconfig twice. Enabling twice...

0.00211EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/16 11:07 p.m.13 views

CVE-2025-62727-Demo

CVE-2025-62727 Demo Victim Description The target victim of CVE-2025-62727 is a simple FastAPI app that: Serves Hello World at /. Serves static files under /static using Starlette's StaticFiles. Auto-generates text files containing A repeated N times for N in 1024, 2048, 50176 on startup. How to...

7.5CVSS6.3AI score0.00638EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 9:06 p.m.19 views

CVE-2020-28488

CVE-2020-28488 Denial of Service DoS - jQuery UI 1.12.1 - Exploit Payload root@kitploit: for var i = 0; i DoS - jQuery UI 1.12.1 DoS - jQuery UI 1.12.1 Exploit PoC by Rafael Cintra Lopes function exploit for var i = 0; i...

6AI score
SaveExploits4
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.6 views

Astra Linux – Vulnerability in Firefox and Thunderbird

Repeatedly writing to the history interface attributes could have caused a denial-of-service condition in the browser. This issue was addressed by introducing rate-limiting to this API. This vulnerability affects Firefox 132, Firefox ESR 128.4, Thunderbird 128.4, and Thunderbird 132...

7.5CVSS6.9AI score0.00601EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/09/10 8:23 a.m.10 views

CVE-2026-88284 GV-LPC2011/LPC2211 - ONVIF SetUser Repeated-Element Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker...

4.9CVSS5.7AI score0.00251EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 8:23 a.m.18 views

CVE-2026-88284

GeoVision GV-LPC2211 version 1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker, resulting in a denial of service. The vulnerability is scored CVSS 4.9 (Medium) with an attack ve...

4.9CVSS5.7AI score0.00251EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/10 8:23 a.m.8 views

EUVD-2026-75318

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker...

4.9CVSS5.7AI score0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 8:23 a.m.39 views

CVE-2026-88284 GV-LPC2011/LPC2211 - ONVIF SetUser Repeated-Element Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker...

4.9CVSS0.00251EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/10 8:23 a.m.11 views

CVE-2026-88283 GV-LPC2011/LPC2211 - ONVIF CreateUsers Repeated-Element Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker...

4.9CVSS5.7AI score0.00251EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 8:23 a.m.15 views

CVE-2026-88283

GeoVision GV-LPC2211 V1.13 (and GV-LPC2011) is affected by a stack-frame overflow in the ONVIF CreateUsers service. The vulnerability is caused by a failure to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and ...

4.9CVSS5.7AI score0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 8:22 a.m.41 views

CVE-2026-88281 GV-LPC2011/LPC2211 - ONVIF DeleteUsers Repeated-Element Stack Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker...

4.9CVSS0.00251EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/10 8:22 a.m.13 views

CVE-2026-88281 GV-LPC2011/LPC2211 - ONVIF DeleteUsers Repeated-Element Stack Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker...

4.9CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Rows per page
Query Builder