693 matches found
Node_CVE-2023-29017
CVE-2023-29017 | Ejecución remota de código mediante escape de sandbox vm2 WHS 4th 31st Class - Kim Geonwoo @gunwoo105 Resumen de la vulnerabilidad vm2 es una biblioteca de sandbox para Node.js que permite ejecutar JavaScript no confiable en un entorno restringido. En condiciones normales, el...
CVE-2026-81633
Improper Input Validation vulnerability in ash-project ashgraphql allows an unauthenticated client to crash a relay nodeid: ... query with an unhandled KeyError. AshGraphql.Graphql.Resolver.resolvenode/2 decodes the client-supplied global ID with decoderelayid/1, which only base64-decodes the...
CVE-2026-81633
CVE-2026-81633 is an improper input validation vulnerability in ash-project ash_graphql (Elixir GraphQL library). The function resolve_node/2 base64-decodes a client-supplied global ID and passes the type segment directly to Map.fetch!/2, which raises an unhandled KeyError when the type is not a ...
CVE-2026-81633 Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment
Improper Input Validation vulnerability in ash-project ashgraphql allows an unauthenticated client to crash a relay nodeid: ... query with an unhandled KeyError. AshGraphql.Graphql.Resolver.resolvenode/2 decodes the client-supplied global ID with decoderelayid/1, which only base64-decodes the...
CVE-2025-70886
CVE-2025-70886 Un exploit Proof of Concept PoC per CVE-2025-70886, una vulnerabilità di denial of service persistente in Halo CMS v2.22.4 e versioni precedenti che consente ad attaccanti remoti di mandare in crash l'interfaccia dei commenti dell'admin inviando payload malformati. Informazioni di...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel before version 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. A unhandled page fault may occur...
Improper Check for Unusual or Exceptional Conditions
Overview Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions via the DeadLetterPublishingRecovererFactory. An attacker can cause repeated failures and stall partition consumption by attaching a malformed retrytopic-original-timestamp header suc...
bind9: bind: Potential wildcard CNAME RPZ policy bypass
A flaw was found in BIND 9, a widely used Domain Name System DNS software. A remote attacker could exploit this by sending specially crafted, excessively long DNS queries. This could bypass Response Policy Zone RPZ rules, which are designed to block access to malicious domains, and potentially...
CVE-2026-68901 WeKan Board Export REST Endpoints: NULL Pointer Dereference on Invalid authToken Leads to Uncaught Exception / Remote Denial of Service
Wekan is open source kanban built with Meteor. Prior to 10.38, the /api/boards/:boardId/export, /api/boards/:boardId/attachments/:attachmentId/export, /api/boards/:boardId/export/csv, and /api/boards/:boardId/exportExcel handlers in models/export.js and models/exportExcel.js looked up a user from...
CVE-2026-68901
In Wekan versions before 10.38, export endpoints in models/export.js and models/exportExcel.js called user._id.toString() without null-checking ReactiveCache.getUser(), throwing a TypeError on an invalid authToken and crashing the process via unhandled rejection. Fixed in 10.38 with a 401 guard a...
MINI-J86M-HVPX-HVW6
Bulletin has no description...
MINI-6R63-R9H7-9X5M
Bulletin has no description...
PT-2026-78324
Name of the Vulnerable Software and Affected Versions mod cluster affected versions not specified Description A flaw exists in the AdvertiseListenerImpl of the org.jboss.modcluster core module. An unauthenticated attacker can cause a denial of service by sending a single crafted UDP multicast...
MINI-XQ3C-MXR9-2HPF
Bulletin has no description...
MINI-RR2X-3VGW-CCC6
Bulletin has no description...
libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process
A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...
MINI-44P3-8QVP-RGFQ
Bulletin has no description...
MINI-P22H-8GJ8-34WV
Bulletin has no description...