192 matches found
Envoy affected by off-by-one write in JsonEscaper::escapeString()
Summary An off-by-one write in Envoy::JsonEscaper::escapeString can corrupt std::string null-termination, causing undefined behavior and potentially leading to crashes or out-of-bounds reads when the resulting string is later treated as a C-string. Details The bug is in the control-character...
Elastic Packetbeat 安全漏洞
Elastic Packetbeat is a data collector developed by the Dutch company Elastic. There is a security vulnerability in Elastic Packetbeat, which stems from improper array index validation in the PostgreSQL protocol parser. This vulnerability could allow attackers to trigger a Go runtime crash by...
CVE-2026-26201
emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 3.21.2, multiple shared maps are accessed without consistent synchronization across goroutines. Under concurrent activity, Go runtime can trigger fatal error: concurrent map read and map write, causing C2 process cra...
CVE-2026-22213 RIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overflow in tapslip6 Utility
RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in the tapslip6 utility. The vulnerability is caused by unsafe string concatenation in the devopen function, which constructs a device path using unbounded user-controlled input. The utility...
CVE-2025-65570
A type confusion in jsish 2.0 allows incorrect control flow during execution of the OPNEXT opcode. When an “instanceof” expression uses an array element access as the left-hand operand inside a for-in loop, the instructions implementation leaves an additional array reference on the stack rather...
EUVD-2018-13360
Malware in sbrugna...
EUVD-2016-8837
Malware in sbrugna...
EUVD-2018-13362
Malware in sbrugna...
CVE-2025-54811
OpenPLCV3 has a vulnerability in the enipThread function that occurs due to the lack of a return value. This leads to a crash when the server loop ends and execution hits an illegal ud2 instruction. This issue can be triggered remotely without authentication by starting the same server multiple...
EUVD-2024-0146
Malicious code in bioql PyPI...
EUVD-2024-0147
Malicious code in bioql PyPI...
EUVD-2024-0140
Malicious code in bioql PyPI...
EUVD-2024-0134
Malicious code in bioql PyPI...
EUVD-2023-0192
Malicious code in bioql PyPI...
EUVD-2025-21177
Malicious code in bioql PyPI...
EUVD-2024-3109
Malicious code in bioql PyPI...
EUVD-2024-0137
Malicious code in bioql PyPI...
EUVD-2024-0133
Malicious code in bioql PyPI...