CVE-2026-102278

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the...

CVE-2026-102276

A flaw was found in brace-expansion. A remote attacker can provide specially crafted brace patterns with excessive nested groups or large arrays to trigger uncontrolled recursion during parsing. This behavior exhausts the native call stack and crashes the application process, leading to a Denial ...

CVE-2026-102276

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and use...

CVE-2026-102278

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before...

CVE-2026-102278 brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before...

CVE-2026-102278 brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before...

EUVD-2026-88555

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before...

CVE-2026-102278

The brace-expansion library is vulnerable to a process-terminating denial of service due to uncontrolled recursion during nested brace group expansion. Prior to versions 1.1.20, 2.1.6, 3.0.8, and 5.0.11 , providing an untrusted pattern with deeply nested brace alternatives or single-part sets cau...

CVE-2026-102278

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before...

CVE-2026-102276

The brace-expansion library is vulnerable to a process-terminating denial of service due to native stack exhaustion in the parseCommaParts function. Vulnerable versions include those prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10 . The root cause is two-fold: crafted brace patterns can trigger deep re...

CVE-2026-102276 brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and use...

CVE-2026-102276 brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and use...

EUVD-2026-88550

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and use...

nginxpwn

Entrenamiento de explotación -- CVE-2013-2028: Desbordamiento de búfer basado en pila de Nginx Este repositorio contiene el código fuente de nginx 1.4.0, así como binarios precompilados con y sin cookies de pila. También hay un Vagrantfile para una configuración sencilla. Anuncio y parche:...

tpotce

T-Pot - La Plataforma Multi Honeypot Todo en Uno T-Pot es la plataforma honeypot todo en uno, opcionalmente distribuida, multiarquitectura amd64, arm64, que admite más de 20 honeypots y un sinfín de opciones de visualización utilizando Elastic Stack, mapas animados de ataques en vivo y muchas...

CVE-2020-6287_RECON-scanner

Escáner de Evaluación de Vulnerabilidades e Indicadores de Compromiso IoC para CVE-2020-6287 RECON RECON Remotely Exploitable Code On NetWeaver es una vulnerabilidad crítica CVSSv3 10 que afecta a varias aplicaciones técnicas y de negocio de SAP que se ejecutan sobre la pila Java de SAP NetWeaver...

CVE-2018-20343

CVE-2018-20343 This is a PoC for CVE-2018-20343, a vulnerability in Ken Silverman's Build Engine. The generated .map file triggers a buffer overflow and overwrites the stack as shown below: Open Watcom under DosBox 0.74-2: the analyst controls the stack Under FreeDos 1.2: the analyst controls EIP...

ai-kubernetes-helm-chart-security

IA en Kubernetes: valores predeterminados de seguridad de los Helm charts evidencia Este repositorio contiene los datos y la evidencia que respaldan el informe técnico de Sorami "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" versión 1.2. Lea el informe aquí:...

CVE-2026-98001

A flaw was found in the Linux kernel's LTC4282 hardware monitoring driver. This vulnerability can lead to a Denial of Service DoS due to the use of uninitialized stack memory. The driver fails to initialize its clock data structure during setup, leaving member fields uninitialized. A local attack...

Dnstracer-1.9-Fix

Dnstracer-1.9-Fix dnstracer dnstracer determina de dónde obtiene su información un Servidor de Nombres de Dominio DNS determinado para un nombre de host dado, y sigue la cadena de servidores DNS hasta la respuesta autoritativa. Problema Desbordamiento de búfer basado en pila en dnstracer hasta la...