AZL-105428 CVE-2026-82459 affecting package thrift 0.24.0-1

Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-82459

Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-82459

A flaw was found in Apache Thrift. A remote, unauthenticated attacker could cause a Denial of Service DoS by sending specially crafted network traffic to an affected application. Due to an integer underflow in the 32-bit C++ THeaderTransport component, processing this malformed data triggers an...

EUVD-2026-91398

Uncaught exception, Loop with unreachable exit condition 'infinite loop', Integer underflow wrap or wraparound vulnerability in Apache Thrift D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-86537

A vulnerability exists in the Apache Thrift D language bindings (versions before 0.25.0 ) where a remote, unauthenticated attacker can cause a Denial of Service (DoS) . By sending specially crafted input—specifically a truncated HTTP request —the attacker can trigger an integer underflow or an un...

CVE-2026-86537 Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service

Uncaught exception, Loop with unreachable exit condition 'infinite loop', Integer underflow wrap or wraparound vulnerability in Apache Thrift D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-82459 Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process

Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-82459

Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-82459

Apache Thrift versions before 0.25.0 are vulnerable to a Denial of Service (DoS) condition due to an integer underflow (wrap or wraparound) in the 32-bit C++ THeaderTransport component. A remote, unauthenticated attacker can exploit this by sending specially crafted network traffic, which trigger...

CVE-2026-82459 Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process

Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91415

Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-27654-PoC

CVE-2026-27654 – nginx ngxhttpdavmodule DAV Alias 경로 처리 PoC 이 저장소는 nginx의 ngxhttpdavmodule에 존재하는 힙 오버플로heap-overflow 취약점인 CVE‑2026‑27654 에 대한 개념 증명PoC 익스플로잇을 제공합니다. 이 버그는 특수하게 조작된 Destination 헤더와 alias 기반 location을 사용하는 MOVE/COPY 요청을 처리할 때 발생하는 sizet 언더플로underflow에서 비롯됩니다. ⚠️ 면책 조항: 이 도구는 공인된 보안 연...

CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

보안 공지: facil.io MIME 파서의 범위를 벗어난 읽기로 인한 서버 크래시 할당된 CVE ID CVE-2026-66729 제품: facil.io 영향을 받는 버전: facil.io = 0.6.0 모든 0.6.x, 모든 0.7.x, master; MIME 파서가 0.6.0에서 추가된 시점부터 영향 구성 요소: lib/facil/http/parsers/httpmimeparser.h CWE: CWE-191 정수 언더플로, CWE-125 범위를 벗어난 읽기 CVSS v3.1: 7.5...

[SECURITY] [DLA 4813-1] open-iscsi security update

Debian LTS Advisory DLA-4813-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert October 02, 2026 https://wiki.debian.org/LTS Package : open-iscsi Version : 2.1.8-1+deb12u1 CVE ID : CVE-2026-18724 CVE-2026-18725 CVE-2026-18726 CVE-2026-18727 CVE-2026-18728...

CVE-2026-25075-check

CVE-2026-25075 취약점 평가 도구 strongSwan VPN 서버가 CVE-2026-25075에 취약한지 중단을 유발하지 않고 안전하게 탐지합니다. 전체 분석 글은 Bishop Fox 블로그에서 확인하세요. 설명 CVE-2026-25075는 strongSwan의 EAP-TTLS 플러그인에 존재하는 정수 언더플로integer underflow 취약점으로, 원격의 인증되지 않은 공격자가 특수하게 조작된 EAP-TTLS 메시지를 통해 IKE 데몬을 충돌시킬 수 있습니다. 이 취약점은 4.5.0부터 6.0.4까지의 모든...

CVE-2023-20938-poc

CVE-2023-20938 — Повышение привилегий через use-after-free в Android binder Доказательство концепции локального повышения привилегий для CVE-2023-20938 , use-after-free в драйвере binder Android. Из непривилегированной оболочки получает uid 0 и переводит SELinux в permissive , затем запускает...

Debian dla-4813 : iscsiuio - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4813 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4813-1 [email protected]...

openSUSE 16 Security Update : aria2 (openSUSE-SU-2026:21997-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21997-1 advisory. Changes in aria2: - CVE-2026-75421: stack buffer underflow in IOFile::getLine when a line begins with a NUL byte boo1276754 - Fix build with Nettle 4.0...

MikroTik RouterOS < 7.24 Web Management Integer Underflow RCE (CVE-2026-84411)

According to its self-reported version, the remote networking device is running a version of MikroTik RouterOS prior to 7.24. It is, therefore, affected by a remote code execution vulnerability. The web management service in affected RouterOS versions contains an integer underflow in its HTTP...

CVE-2023-25610

CVE-2023-25610 Утечка памяти в куче heap underflow в интерфейсе управления FortiOS приводит к удаленному выполнению кода. Область применения и ограничения 1. Fortinet 6.x 2. Основано на TLSv1.3, на других версиях TLS могут быть различия. Использование python3 cve-2022-42475.py rhost rport lhost...