zclaw

zclaw The smallest possible AI personal assistant for ESP32. zclaw is written in C and runs on ESP32 boards with a strict all-in firmware budget target of = 888 KiB on the default build. It supports scheduled tasks, GPIO control, persistent memory, and custom tool composition through natural...

EUVD-2026-125228

NocoDB before 2026.06.2 contains an attachment size limit bypass that allows authenticated Editor users to store oversized files because data-attachment-v3.service.ts trusts the remote server's advertised content length. Attackers can point the v3 upload-by-URL endpoint at a server that understat...

CVE-2026-126293 NocoDB before 2026.06.2 Attachment Size Limit Bypass via Upload by URL

NocoDB before 2026.06.2 contains an attachment size limit bypass that allows authenticated Editor users to store oversized files because data-attachment-v3.service.ts trusts the remote server's advertised content length. Attackers can point the v3 upload-by-URL endpoint at a server that understat...

CVE-2026-126293

NocoDB versions prior to 2026.06.2 are vulnerable to an attachment size limit bypass via the v3 upload-by-URL endpoint. The root cause is located in data-attachment-v3.service.ts , which improperly trusts the remote server's advertised content length. This allows authenticated Editor users to upl...

PT-2026-146624

NocoDB before 2026.06.2 contains an attachment size limit bypass that allows authenticated Editor users to store oversized files because data-attachment-v3.service.ts trusts the remote server's advertised content length. Attackers can point the v3 upload-by-URL endpoint at a server that understat...

JetBrains YouTrack < 2026.2.19728 Attachment Size Limit Bypass (CVE-2026-123336)

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.19728. It is, therefore, affected by an attachment size limit bypass vulnerability: - In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion...

Linux Distros Unpatched Vulnerability : CVE-2026-77063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - multer is a middleware for handling multipart/form-data in Node.js. When an application uses an asynchronous fileFilter together with the fileSize limit, a race...

CVE-2026-123336

In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion...

EUVD-2026-118100

In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion...

CVE-2026-123336

In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion...

CVE-2026-123336

In JetBrains YouTrack versions prior to 2026.2.19728 , an attacker could bypass the attachment size limit through AI assistant thread conversion . This vulnerability is associated with CWE-770 (Allocation of Resources Without Limits or Throttling) and has a CVSS 3.1 base score of 3.1 (LOW) . Expl...

CVE-2026-123336: JetBrains YouTrack: In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion

In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion...

GNU Tar Data Compromise

The vulnerability in the GNU Tar archiver is related to the lack of file size limits. Exploitation of this vulnerability may allow an attacker to compromise data integrity by using a malicious file...

CVE-2026-77063

multer is a middleware for handling multipart/form-data in Node.js. When an application uses an asynchronous fileFilter together with the fileSize limit, a race condition in multer's file stream handling can allow a file that exceeds the configured size limit to bypass the size-limit rejection. A...

CVE-2026-86019 Part-DB: Attachment Size Limit Bypass via API Base64 Upload

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated API users to bypass the configured maximum attachment file size by uploading attachments through the API using base64-encoded file data. The application enforces...

CVE-2026-86019

The open source inventory management system Part-DB is vulnerable to an attachment size limit bypass in versions prior to 2.13.2 . Authenticated API users can upload files exceeding the configured maximum size by using base64-encoded file data , as the API path lacks the size validation enforced ...

EUVD-2026-108579

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated API users to bypass the configured maximum attachment file size by uploading attachments through the API using base64-encoded file data. The application enforces...

CVE-2026-86019

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated API users to bypass the configured maximum attachment file size by uploading attachments through the API using base64-encoded file data. The application enforces...

CVE-2026-86019 Part-DB: Attachment Size Limit Bypass via API Base64 Upload

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated API users to bypass the configured maximum attachment file size by uploading attachments through the API using base64-encoded file data. The application enforces...

CVE-2026-86019 Part-DB: Attachment Size Limit Bypass via API Base64 Upload

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated API users to bypass the configured maximum attachment file size by uploading attachments through the API using base64-encoded file data. The application enforces...