CVE-2026-39909

llama.cpp before build b8585 contains a use-after-free vulnerability in the RPC server's GRAPH_RECOMPUTE handler. An unauthenticated remote attacker can store a computation graph, cause referenced buffers to be freed, then reclaim that memory with attacker-controlled content. Sending a subsequent...

EUVD-2026-64001

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

CVE-2026-39909

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

CVE-2026-39909 llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

CVE-2026-39909 llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

CVE-2026-69502

Server-side request forgery ssrf in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-54789

modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of...

CVE-2026-54789

mod_auth_openidc (Apache 2.x OpenID Connect Relying Party module) prior to 2.4.19.4 contains an out-of-bounds read and one-byte out-of-bounds write in oidc_state_cookies_parse_token() (src/state.c). The loop scanning for = in a cookie token does not stop at the string terminator, and the cookie !...

EUVD-2026-63999

OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege attackers to access internal network services by submitting arbitrary URLs to the resources API endpoint. Attackers can POST a crafted URL to /api/v1/resources, causing the server ...

CVE-2026-69502

CVE-2026-69502 is a server-side request forgery (SSRF) vulnerability in Azure SQL Database that allows an unauthorized, network-based attacker to elevate privileges . The CNA-assigned CVSS 3.1 score is 10.0 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N, indicating no privileges ...

cve-2025-55182-analysis

CVE-2025-55182 — RCE-Analyse von React Server Components Analyse von Webanwendungssicherheitslücken · M2 Cybersecurity · 2025 Autor: Niane Mohamed · LinkedIn Ende-zu-Ende-Ausnutzungskette einer kritischen CVSS 10.0 unsicheren Deserialisierungsschwachstelle in React Server Components, von der...

hfs2

Introduction You can use HFS HTTP File Server to send and receive files. It's different from classic file sharing because it uses web technology. It also differs from classic web servers because it's very easy to use and runs "right out-of-the box". The virtual file system will allow you to easil...

claude-project-scanner

Claude-Projekt-Scanner Read-only Claude Code-Fähigkeit, die Drittanbieter-Projekte auf bekannte Sicherheitsrisiken scannt, bevor du sie öffnest. Erfasst die Angriffsmuster, die in folgenden Dokumenten beschrieben sind: CVE-2025-59536 Claude Code Lifecycle Hooks-Einschleusung CVE-2025-61260 OpenAI...

CVE-2026-48769

Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted Incus-Image-Hash header. This can lead to arbitrary command execution as root on the server. Version 7.2.0 patches th...

cve-reproduction-lab

مختبر إعادة إنتاج الثغرات CVE نظرة عامة هذا المشروع هو مختبر أبحاث في الأمن السيبراني مصمم لإظهار الأثر الواقعي لثغرات البرمجيات من خلال استغلال مُتحكَّم فيه ومحاكاة للتصحيحات الدفاعية. يركز المختبر على CVE-2021-41773، وهي ثغرة حرجة من نوع اجتياز المسار Path Traversal في خادم Apache HTTP تسمح...

prismsec

PrismSec 🔷 Server MCP sicuro e modulare per strumenti di pentesting. Raggruppa 7 strumenti di sicurezza standard del settore nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap in 13 strumenti MCP registrati — pronti per l'uso con Claude, Cursor, Copilot e qualsiasi agente AI compatibile con...

EUVD-2026-63983

Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted Incus-Image-Hash header. This can lead to arbitrary command execution as root on the server. Version 7.2.0 patches th...

CVE-2026-48769

CVE-2026-48769 is a critical (CVSS 9.9) arbitrary file write vulnerability in Incus , a system container and virtual machine manager, affecting versions prior to 7.2.0 . The root cause is that the Incus client trusts a crafted Incus-Image-Hash header returned by a malicious image server, leading ...

CVE-2026-48769 Incus has an arbitrary file write on its client due to trusted image hash

Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted Incus-Image-Hash header. This can lead to arbitrary command execution as root on the server. Version 7.2.0 patches th...

CVE-2021-41773-Apache-Lab

CVE-2021-41773 — Laboratorio Apache HTTP Server 2.4.49 Riproduzione di CVE-2021-41773 , una vulnerabilità di path traversal in Apache HTTP Server 2.4.49. Questo progetto utilizza Docker per creare un ambiente vulnerabile isolato e un PoC Python per dimostrare la divulgazione controllata di file...