jsonorg-fn1

json.org CVE-2022-45688 false negative The project illustrates CVE-2022-45688 in json.org -- there is a simple application XML2JSONConverter to read XML from input, convert it to JSON and pretty-print it to the console. Using malicious input, the application crashes with a stackoverflow. The test...

CVE-2025-66837

CVE-2025-66837 Malicious File Upload Description A file upload vulnerability in ARIS allows attackers to execute arbitrary code via uploading a crafted PDF file/Malware CVSS Score: 6.8 Medium Attack Type Remote Authenticated Affected Versions Versions before 10.0.23.0.3587512 Discovered By: Yazan...

CVE-2023-20110

CVE-2023-20110 PoC script for CVE-2023-20110 - Cisco Smart Software Manager On-Prem SQL Injection Vulnerability Usage 1. Update IP address and admin cookies in script, 2. Run the script with the following command: python3 exploit.py...

idm:DL1 security, bug fix, and enhancement update

An update is available for softhsm, ipa-healthcheck, module.slapi-nis, module.ipa-healthcheck, module.python-qrcode, slapi-nis, python-jwcrypto, module.python-yubico, module.custodia, module.python-kdcproxy, module.opendnssec, module.softhsm, python-qrcode, python-yubico, pyusb, ipa,...

Thermo Fisher Torrent Suite Software

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for...

Cisco ASA/FTD Software - Cross-Site Scripting

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are vulnerable to cross-site scripting and could allow an unauthenticated, remote attacker to conduct attacks against a user of the web services interface of an affected device. The vulnerabilities are...

Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of GetFileWithoutZip method. The issue results from th...

Gitea 1.1.0 - 1.12.5 - Remote Code Execution

Gitea 1.1.0 through 1.12.5 is susceptible to authenticated remote code execution, via the git hook functionality, in customer environments where the documentation is not understood e.g., one viewpoint is that the dangerousness of this feature should be documented immediately above the...

Apache Spark UI - Remote Command Injection

Apache Spark UI is susceptible to remote command injection. ACLs can be enabled via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilte...

CVE-2026-110936: Uncontrolled Search Path Element

A vulnerability has been identified in Siemens Software Center All versions V4.0.9.8. The affected application loads dynamic-link libraries DLLs from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application...

UBUNTU-CVE-2026-100236

A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. ...

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

Multiple Atlassian products Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye contain a files or directories accessible to external parties vulnerability which could allow an...

PT-2026-114947

Name of the Vulnerable Software and Affected Versions Siemens Software Center affected versions not specified Description The application loads dynamic-link libraries DLLs from an uncontrolled search path. This allows an authenticated local attacker to place a specially crafted DLL in a directory...

DEBIAN-CVE-2026-100236

A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. ...

AZL-108339 CVE-2026-100236 affecting package dpdk 23.11.3-1

A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. ...

CVE-2026-100236 Dpdk: dpdk: heap out-of-bounds read/write in gso header copy

A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. ...

CVE-2026-100236

A heap out-of-bounds read/write vulnerability exists in the DPDK GSO library . The issue occurs because the software GSO fails to verify if a packet header fits within the source first segment or the destination buffer during a copy to a new mbuf. A header exceeding the configured GSO segment siz...

CVE-2026-100236

A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. ...

hplip: HP Linux Imaging and Printing Software - Use of DSA Key

A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability is due to the use of a weak Digital Signature Algorithm DSA for code signing. A remote attacker could exploit this weakness to forge signatures, potentially leading to the execution of unauthorized code or...

hplip: HP Linux Imaging and Printing Software - Use of DSA Key

A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability is due to the use of a weak Digital Signature Algorithm DSA for code signing. A remote attacker could exploit this weakness to forge signatures, potentially leading to the execution of unauthorized code or...