1426 matches found
security-research
Security Research Vulnerabilities I have reported to the Apache Software Foundation, disclosed through the ASF security process. 46 CVEs across 15 projects , 2023 to 2026. Where a public reproducer exists it is linked. Each one is a minimal, self-contained project that demonstrates the issue and...
asf__tapestry-5_CVE-2019-0207_5-4-4
Este repositorio no tiene un README...
UBUNTU-CVE-2026-66755
Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...
UBUNTU-CVE-2026-7582
A vulnerability was detected in AcademySoftwareFoundation OpenImageIO up to 3.2.0.1-dev. This vulnerability affects unknown code of the file src/dds.imageio/ddsinput.cpp of the component DDS Image Handler. The manipulation results in out-of-bounds write. The attack needs to be approached locally...
CVE-2026-7582
A vulnerability was detected in AcademySoftwareFoundation OpenImageIO up to 3.2.0.1-dev. This vulnerability affects unknown code of the file src/dds.imageio/ddsinput.cpp of the component DDS Image Handler. The manipulation results in out-of-bounds write. The attack needs to be approached locally...
CVE-2026-7582
A vulnerability was detected in AcademySoftwareFoundation OpenImageIO up to 3.2.0.1-dev. This vulnerability affects unknown code of the file src/dds.imageio/ddsinput.cpp of the component DDS Image Handler. The manipulation results in out-of-bounds write. The attack needs to be approached locally...
CVE-2018-1000117
Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates...
CVE-2025-12839
Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...
MAL-2025-49316 Malicious code in my-team-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcebd381b163f06c896e93c9023d91db384265cd9da67f09ff1c85bd04ea70ed The package my-team-tools was found to contain malicious code. Source: ghsa-malware 320c0e93b25457bec2acf55515716007170fdce9a83295b33dc1f7c017a1f18c...
EUVD-2005-4801
Malware in sbrugna...
EUVD-2020-15049
Malware in sbrugna...
EUVD-2010-0852
Malware in sbrugna...
EUVD-2018-1786
Malware in sbrugna...
EUVD-2020-8549
Malware in sbrugna...
EUVD-2023-2135
Malicious code in bioql PyPI...
EUVD-2023-2147
Malicious code in bioql PyPI...
EUVD-2023-1748
Malicious code in bioql PyPI...
EUVD-2023-1686
Malicious code in bioql PyPI...
