Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 1.0.2.0. Vulnerability Details CVEID:CVE-2024-28835 DESCRIPTION: A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using...

CVE-2026-55619 eml_parser: Parser DoS via deeply nested parentheses in e-mail headers

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, emlparser.parser.HeaderParser.headerfetchparse in emlparser/parser.py uses email.utils.getaddresses to parse address-bearing e-mail...

Denial Of Service (DoS)

Phoenix is vulnerable to Denial-of-Service DoS. The vulnerability is due to an unsafe truthiness check for attacker-controlled presence keys that can reference JavaScript Object.prototype properties, which allows an attacker to trigger uncaught exceptions and cause persistent client-side denial o...

PT-2026-81475

Name of the Vulnerable Software and Affected Versions eml parser versions prior to 3.0.2 Description The header fetch parse function within the eml parser.parser.HeaderParser module uses email.utils.getaddresses to parse address-bearing e-mail headers. A deeply nested CFWS Comments and Folding...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to multer-2.0.1.tgz (CVE-2025-7338 ,CVE-2026-2359 ,CVE-2026-3304 ,CVE-2026-3520)

Summary multer is vulnerable to Uncaught Exception,Missing Release of Resource after Effective Lifetime,Incomplete Cleanup,Uncontrolled Recursion attacks. These vulnerabilities affect IBM Spectrum Control Vulnerability Details CVEID:CVE-2025-7338 DESCRIPTION: Multer is a node.js middleware for...

CVE-2026-77755

misp-stix is a Python library used by MISP for importing STIX 1 and STIX 2 documents. Two distinct flaws allow denial-of-service: (1) the import code used sys.exit() for parsing failures, which raises SystemExit (a BaseException subclass) that bypasses standard exception handlers, causing uncontr...

PT-2026-79353

A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents. The STIX import code used sys.exit to handle several parsing and loading failures. Because SystemExit inherits from BaseException rather than Exception, these failures...

Kibana 8.x < 8.19.20 / 9.0.x < 9.3.8 / 9.4.x < 9.4.5 Denial of Service (ESA-2026-101)

The version of Kibana installed on the remote host is 8.x prior to 8.19.20, 9.0.x prior to 9.3.8, or 9.4.x prior to 9.4.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-101 advisory. - Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in...

Kibana 8.x < 8.19.20 / 9.0.x < 9.3.5 / 9.4.x < 9.4.2 Denial of Service (ESA-2026-136)

The version of Kibana installed on the remote host is 8.x prior to 8.19.20, 9.0.x prior to 9.3.5, or 9.4.x prior to 9.4.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-136 advisory. - Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input...

Uncaught Exception

Overview asteval is a Safe, minimalistic evaluator of python expression using ast module Affected versions of this package are vulnerable to Uncaught Exception via the eval process. An attacker can terminate the application process or disrupt signal and cleanup handlers by supplying specially...

NanaZip 6.5 Denial of Service

NanaZip version 6.5 suffers from a denial of service vulnerability. A crafted .NET single-file bundle triggers an uncaught exception / unbounded allocation in the DotNetSingleFile handler's Extract. Exploit Title: NanaZip 6.5 - DoS Date: 2026-07-17 Exploit Author: Pig-Tail Jorge González Milla...

EUVD-2026-62451

phpMyFAQ before 4.1.7 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...

CVE-2026-76210

phpMyFAQ before 4.1.6 (some sources cite 4.1.7) contains an inadequate HTML sanitization flaw in FAQ answers before PDF generation via TCPDF . An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory (e.g...

BIT-KIBANA-2026-72660 Uncaught Exception in Kibana Leading to Denial of Service

Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged access can cause an internal error condition in Kibana by supplying specially crafted data...

BIT-ELK-2026-72660 Uncaught Exception in Kibana Leading to Denial of Service

Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged access can cause an internal error condition in Kibana by supplying specially crafted data...