BIT-LIBPHP-2026-7260 Stack overflow in phar with circular symlinks

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...

vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo()

A memory corruption flaw in Vim allows an attacker to cause a Denial of Service DoS. When a SOFO-based spell language is active, providing an excessively long word to the spell checker triggers a stack out-of-bounds write in the spellsoundfoldsofo function, causing the editor to crash...

MINI-86CR-QPXP-JM22

Bulletin has no description...

MINI-P98Q-M8CV-R2QJ

Bulletin has no description...

MINI-47R5-JWRW-6MVC

Bulletin has no description...

CVE-2026-19959

A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUserName causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made...

CVE-2026-19959 Edimax EW-7478APC formWanTcpipSetup stack-based overflow

A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUserName causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made...

MINI-RFV3-CXR5-6G82

Bulletin has no description...

CVE-2026-74794

Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to the template context, exhausting stack space and triggering an uncatchable StackOverflowException...

CVE-2026-74792

Scriban before 7.0.0 affected versions = 6.6.0 contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path ParseArrayInitializer → ParseExpression → ParseArrayInitializer that is not covered by the ExpressionDepthLimit count...

MINI-H7CW-XG89-HVJ7

Bulletin has no description...

MINI-VVP6-8X35-29H6

Bulletin has no description...

CVE-2026-74794 Scriban before 6.6.0 Denial of Service via Infinite Recursion

Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to the template context, exhausting stack space and triggering an uncatchable StackOverflowException...

CVE-2026-74795

Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The ExpressionDepthLimit defaults to null/disabled, allowing attackers to supply deeply nested templates (thousands of nested blocks) that exhaust thread stack space and trigger a StackOverflowE...

CVE-2026-74794

Scriban before version 6.6.0 contains an infinite recursion vulnerability in object rendering when ObjectRecursionLimit is unlimited. Attacker-supplied circular references in the template context can exhaust stack space, causing an uncatchable StackOverflowException that terminates the hosting pr...

CVE-2026-74794 Scriban before 6.6.0 Denial of Service via Infinite Recursion

Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to the template context, exhausting stack space and triggering an uncatchable StackOverflowException...

CVE-2026-74795 Scriban before 6.6.0 Denial of Service via Uncontrolled Recursion

Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth limit the ExpressionDepthLimit property in ParserOptions defaults to null/disabled, so an attacker who controls template input can supply a...

EUVD-2026-59960

Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth limit the ExpressionDepthLimit property in ParserOptions defaults to null/disabled, so an attacker who controls template input can supply a...

CVE-2026-74795 Scriban before 6.6.0 Denial of Service via Uncontrolled Recursion

Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth limit the ExpressionDepthLimit property in ParserOptions defaults to null/disabled, so an attacker who controls template input can supply a...

EUVD-2026-59958

Scriban before 7.0.0 affected versions = 6.6.0 contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path ParseArrayInitializer → ParseExpression → ParseArrayInitializer that is not covered by the ExpressionDepthLimit count...