📄 NanoMQ 0.24.6 API SQL Rule Engine Buffer Overflow

This script is a proof of concept used to test NanoMQ's API for improper input handling. It sends an intentionally long and malformed SQL alias through the /api/v4/rules endpoint to check whether the service safely rejects the input or crashes. The code does not achieve real remote code execution...

CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability

CVE-Factory is a Multi-Agent system for fully automated, end-to-end CVE reproduction. Given CVE records, the system automatically researches details, generates test cases, builds Docker environments, and validates that each vulnerability can be both exploited and patched. The pipeline transforms...

CVE-2025-15555: Stack-based Buffer Overflow

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hssogsdiamcxmarcb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGSKEYLEN results in stack-based buffer overflow. The attack may be...

Linux pci_endpoint_test_remove() Heap Buffer Overflow DoS

The vulnerability of the pciendpointtestremove function in the drivers/misc/pciendpointtest.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

CLSA-2026-1770111651 glib2: Fix of CVE-2025-13601

CVE-2025-13601: Fixed incorrect buffer size calculation in gescapeuristring and added fuzz tests - 4-0001-fix-gdatetime-test: fixes gdatetime test failing...

MAL-2026-699 Malicious code in tokyo-ppe-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c5907d5bd4d20875048608d41ca58ea06687c84a0c7804cc83f3c3d706ff5fe4 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

oriole-test (0.2.2) potentially affected by CVE-2026-1703 via pip (9.0.2)

pip PYPI version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - oriole-test 0.2.2 Source cves: CVE-2026-1703 Source advisory: OSV:GHSA-6VGW-5PG2-W6JP...

ml-management (>=0.1.0, <=0.4.0), telemed-sk (>=1.1.0, <=1.2.5) +1 more potentially affected by CVE-2025-10279 via mlflow (2.4.0)

mlflow PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ml-management =0.1.0, =1.1.0, =1.0.0, =1.1.37 Source cves: CVE-2025-10279 Source advisory: OSV:GHSA-4X5P-F36R-MXXR...

OpenSky Flight Planning SQL Injection

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the gettest parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

OpenSky Flight Planning SQL Injection

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure when processing parameters like testid and taskid. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

io.undertow:undertow-http2-test-suite (1.2.0.beta1), io.undertow:undertow-servlet (1.2.0.beta1) +2 more potentially affected by CVE-2024-4027 via io.undertow:undertow-core (1.2.0.beta1)

io.undertow:undertow-core MAVEN version 1.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.beta1 - io.undertow:undertow-servlet 1.2.0.beta1 -...

io.undertow:undertow-http2-test-suite (1.2.3.final), io.undertow:undertow-servlet (1.2.3.final) +2 more potentially affected by CVE-2024-4027 via io.undertow:undertow-core (1.2.3.final)

io.undertow:undertow-core MAVEN version 1.2.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.3.final - io.undertow:undertow-servlet 1.2.3.final -...

io.undertow:undertow-http2-test-suite (1.3.0.beta1), io.undertow:undertow-servlet (1.3.0.beta1) +2 more potentially affected by CVE-2024-4027 via io.undertow:undertow-core (1.3.0.beta1)

io.undertow:undertow-core MAVEN version 1.3.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta1 - io.undertow:undertow-servlet 1.3.0.beta1 -...

io.undertow:undertow-http2-test-suite (1.3.0.cr3), io.undertow:undertow-servlet (1.3.0.cr3) +1 more potentially affected by CVE-2024-4027 via io.undertow:undertow-core (1.3.0.cr3)

io.undertow:undertow-core MAVEN version 1.3.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.cr3 - io.undertow:undertow-servlet 1.3.0.cr3 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta11), io.undertow:undertow-servlet (1.3.0.beta11) +20 more potentially affected by CVE-2024-4027 via io.undertow:undertow-core (1.3.0.beta11)

io.undertow:undertow-core MAVEN version 1.3.0.beta11 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta11 - io.undertow:undertow-servlet 1.3.0.beta11 -...

com.fizzed:ninja-undertow (>=5.3.1.undertow1, <=5.3.1.undertow2), io.undertow:undertow-http2-test-suite (1.3.17.final) +4 more potentially affected by CVE-2024-4027 via io.undertow:undertow-core (1.3.17.final)

io.undertow:undertow-core MAVEN version 1.3.17.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.fizzed:ninja-undertow =5.3.1.undertow1, =1.1.7, =2.0.0-beta-2 -...

io.undertow:undertow-http2-test-suite (1.1.0.beta8), io.undertow:undertow-servlet (1.1.0.beta8) +1 more potentially affected by CVE-2024-4027 via io.undertow:undertow-core (1.1.0.beta8)

io.undertow:undertow-core MAVEN version 1.1.0.beta8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.1.0.beta8 - io.undertow:undertow-servlet 1.1.0.beta8 -...

io.undertow:undertow-http2-test-suite (1.3.8.final), io.undertow:undertow-servlet (1.3.8.final) +1 more potentially affected by CVE-2024-4027 via io.undertow:undertow-core (1.3.8.final)

io.undertow:undertow-core MAVEN version 1.3.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.8.final - io.undertow:undertow-servlet 1.3.8.final -...

io.undertow:undertow-http2-test-suite (1.2.0.beta7), io.undertow:undertow-servlet (1.2.0.beta7) +1 more potentially affected by CVE-2024-4027 via io.undertow:undertow-core (1.2.0.beta7)

io.undertow:undertow-core MAVEN version 1.2.0.beta7 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.beta7 - io.undertow:undertow-servlet 1.2.0.beta7 -...

com.sksamuel.scruffy:scruffy-integrationtest_2.10 (>=1.12.1, <=1.12.2), com.sksamuel.scruffy:scruffy-integrationtest_2.11 (>=1.12.1, <=1.12.2) +22 more potentially affected by CVE-2024-4027 via io.undertow:undertow-core (1.2.5.final)

io.undertow:undertow-core MAVEN version 1.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.sksamuel.scruffy:scruffy-integrationtest2.10 =1.12.1, =1.12.1, =1.12.1, =1.12.1, =1.12.1, =1.12.1,...