437 matches found
cpp-httplib 安全漏洞
cpp-httplib is a C++ library developed by Yhirose, which includes servers and clients for HTTP/HTTPS protocols. Versions of cpp-httplib prior to 0.37.0 contained security vulnerabilities. These vulnerabilities stemmed from stack overflows that occurred when the std::regex library was used to pars...
CVE-2026-29076: Uncontrolled Recursion
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.37.0, cpp-httplib uses std::regex libstdc++ to parse RFC 5987 encoded filename values in multipart Content-Disposition headers. The regex engine in libstdc++ implements backtracking via deep...
PT-2026-4503
Name of the Vulnerable Software and Affected Versions dataSIMS Avionics ARINC 664-1 version 4.5.3 Description The software contains a local buffer overflow that allows attackers to overwrite memory. This is achieved by manipulating the milstd1553result.txt file. An attacker can create a malicious...
bios-bmc-smm-error-logger:rde_fuzz: Heap-buffer-overflow in void std::__1::vector<unsigned char, std::__1::allocator<unsigned char>>::__init
Detailed Report: https://oss-fuzz.com/testcase?key=5942459638284288 Project: bios-bmc-smm-error-logger Fuzzing Engine: libFuzzer Fuzz Target: rdefuzz Job Type: libfuzzerasanbios-bmc-smm-error-logger Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x781f616e0338 Crash...
Malicious code in store-std (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d331f4d0ceded686ff7dab5f2329693385f0e0381a8c236d44c9234e24083a The package store-std was found to contain malicious code...
EUVD-2025-37053
Malicious code in store-std npm...
MAL-2025-49240 Malicious code in store-std (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d331f4d0ceded686ff7dab5f2329693385f0e0381a8c236d44c9234e24083a The package store-std was found to contain malicious code...
CVE-2025-52885: Use After Free
Poppler ia a library for rendering PDF files, and examining or modifying their structure. A use-after-free write vulnerability has been detected in versions Poppler prior to 25.10.0 within the StructTreeRoot class. The issue arises from the use of raw pointers to elements of a std::vector, which...
EUVD-2018-18095
Malware in sbrugna...
EUVD-2021-1846
Malware in sbrugna...
EUVD-2020-3463
Malware in sbrugna...
EUVD-2021-1783
Malware in sbrugna...
EUVD-2022-38874
Malicious code in bioql PyPI...
EUVD-2022-46325
Malicious code in bioql PyPI...
EUVD-2022-50276
Malicious code in bioql PyPI...
a2 (>=0.5.0-alpha.1, <=0.5.0), a_chat (0.1.0) +2625 more potentially affected by unknown CVE via async-std (>=0.99.4, <=1.13.2)
async-std CARGO version =0.99.4, =0.5.0-alpha.1, =0.1.0, =0.3.1, =0.1.0, =0.1.0, =0.7.0, =0.3.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0052...
RUSTSEC-2025-0052 async-std has been discontinued
The async-std has been discontinued. Alternatives: - smol...
async-std has been discontinued
The async-std has been discontinued. Alternatives: - smol...