26873 matches found
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
CVE-2025-57392
CVE-2025-57392 🔒 安全漏洞报告 产品：BenimPOS Desktop V3.0 漏洞类型：不安全的文件权限 受影响组件：BenimPOS.exe, unins000.exe, System.Data.SQLite.dll 漏洞分类：CWE-276：不正确的默认权限 概念验证作者：Fatih Bülbül 测试环境：Windows 11 x64 – 本地管理员 + 标准用户 🛠️ 1. 漏洞检测 首先，我使用 Sysinternals 开发的 AccessChk.exe 工具检查了 BenimPOS 应用程序安装目录的权限： 使用的命令： accesschk.exe...
Sudo-Vulnerability-Exploit-CVE-2019-14287
Sudo漏洞利用——CVE-2019-14287 Sudo被发现不可靠，它是几乎任何基于Unix和Linux的操作系统中最重要、最强大且最常用的实用程序之一，作为一个简单的命令存在。一个伪安全策略绕过缺陷，允许恶意用户或应用程序在目标Linux设备上执行任意命令。该错误需要非标准设置才能触发。换句话说，Linux机器本身并不会自然地被破坏。错误的用户只应在Linux操作系统上执行命令时使用“Super User Do”命令，通过将用户ID定义为“-1”来作为命令源执行1。这种不安全性需要按CVE-2019-14287中演示的结构化设置，但也为未授权用户打开了大门。在命令行中使用 -u -...
CVE-2026-79696 Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist
A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit ADK for Python versions 2.0.0 through 2.6.0 on Python OSS, Cloud Run, and GKE environments where pytest is installed allows an unauthenticated remote attacker to execute arbitrary code using a crafted test session...
ROOT-OS-DEBIAN-12-CVE-2026-53215 CVE-2026-53215 in linux - Patched by Root
Root has patched CVE-2026-53215 in the linux package for Root:Debian:12. Multiple fixed versions available...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
CVE-2026-69824
Integer underflow wrap or wraparound in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network...
CVE-2026-69376
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
CVE-2026-69367
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
CVE-2026-69345
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
CVE-2026-69336
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69313
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69308
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
CVE-2026-69272
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69269
Integer underflow wrap or wraparound in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...
CVE-2026-69271
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...
CVE-2026-68897
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...
CVE-2026-68891
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...