CVE-2026-16554 Integer Overflow Leading to Heap Buffer Overflow in cJSON

cJSON library is vulnerable to an integer overflow in the printstringptr function in cJSON.c on 32-bit platforms. The escapecharacters counter, a 32-bit sizet, can wrap around when processing strings containing approximately 858,993,460 or more control characters, causing the output buffer to be...

CVE-2026-16554

cJSON library is vulnerable to an integer overflow in the printstringptr function in cJSON.c on 32-bit platforms. The escapecharacters counter, a 32-bit sizet, can wrap around when processing strings containing approximately 858,993,460 or more control characters, causing the output buffer to be...

CVE-2026-16554

cJSON is a lightweight JSON parser/generator library. The vulnerability is an integer overflow in the print_string_ptr() function of cJSON.c on 32-bit platforms . The escape_characters counter (a 32-bit size_t) wraps around when a JSON string contains approximately 858,993,460 or more control cha...

CVE-2026-16554 Integer Overflow Leading to Heap Buffer Overflow in cJSON

cJSON library is vulnerable to an integer overflow in the printstringptr function in cJSON.c on 32-bit platforms. The escapecharacters counter, a 32-bit sizet, can wrap around when processing strings containing approximately 858,993,460 or more control characters, causing the output buffer to be...

CVE-2026-16554

cJSON library is vulnerable to an integer overflow in the printstringptr function in cJSON.c on 32-bit platforms. The escapecharacters counter, a 32-bit sizet, can wrap around when processing strings containing approximately 858,993,460 or more control characters, causing the output buffer to be...

CVE-2026-14189

The WPBot WordPress plugin (versions before 8.5.2 ) is vulnerable to a second-order SQL injection because it fails to validate administrator-configured field identifiers before utilizing them in a SQL query. This flaw allows users with administrator access to perform SQL injection, which is subse...

CVE-2026-14189 WPBot AI ChatBot < 8.5.2 - Admin+ Second-Order SQL Injection via qc_bot_str_fields

The WPBot WordPress plugin before 8.5.2 does not validate administrator-configured field identifiers before using them in a SQL query, allowing users with administrator access to perform SQL injection that executes when a visitor triggers a search...

PT-2026-65224

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the Bluetooth bpa10x component. The bpa10x setup function sends a vendor command 0xfc0e and processes the response using bt dev info and hci set fw info a...

PT-2026-64863

Name of the Vulnerable Software and Affected Versions cJSON version 1.7.19 Description An integer overflow exists in the print string ptr function within cJSON.c on 32-bit platforms. The escape characters counter, a 32-bit size t, can wrap around when processing strings containing approximately...

CVE-2026-51078

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...

Siemens SIMATIC S7-1500 CPU 1518 MFP Use of Externally-Controlled Format String (CVE-2025-68816)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505823; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Erlang/OTP -- binary_to_term crash on crafted BIT_BINARY_EXT input

https://github.com/erlang/otp/security/advisories/GHSA-54pw-5645-jh86 reports: A specially crafted External Term Format ETF payload of merely 7 bytes triggers a crash in the BEAM virtual machine when processed by binarytoterm/1,2. The BITBINARYEXT tag with specific parameters causes an unsigned...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

Detailed Report: https://oss-fuzz.com/testcase?key=6148494029815808 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: co.nstant.in.cbor.CborDecoder.decodeNext...

MGASA-2026-0299 Updated libnfs packages fix a security vulnerability

The updated packages fix a security vulnerability: libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfszdrstring in lib/libnfs-zdr.c. CVE-2026-53689...

Updated libnfs packages fix a security vulnerability

The updated packages fix a security vulnerability: libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfszdrstring in lib/libnfs-zdr.c. CVE-2026-53689...

CVE-2026-64411

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: terminate table name before findtablelock updatecounters and compatupdatecounters forward a user-supplied 32-byte table name to findtablelock without NUL-terminating it. On a lookup miss, findinlistlock calls...

JLSEC-2026-796 XSS via unescaped code-fence language in default code block renderer

Hugo is a static site generator. From 0.60.0 until 0.163.3, Hugo's default code-block renderer wrote the Markdown code-fence language or info-string into the code class="language-…" data-lang="…" wrapper without HTML escaping. A fence info-string containing a quote and a script payload breaks out...

CVE-2026-64412: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, else we may pass non-null terminated string to requestmodule...

Linux Distros Unpatched Vulnerability : CVE-2026-6390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a special...

Improper Neutralization of Special Elements in Data Query Logic

Overview @budibase/string-templates is a Handlebars wrapper for Budibase templating. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic in the enrichContext process. An attacker can gain unauthorized access to sensitive data, modify...