EUVD-2026-93775

RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

CVE-2019-9053

CVE-2019-9053 Эксплойт CVE-2019-9053 для Python 3 Последнее тестирование: 28-12-2021 Протестировано на: Python 3.10.1 Исходный код эксплойта: https://www.exploit-db.com/exploits/46635 Пользователи несут полную ответственность за любые действия, выполненные с помощью этого инструмента. Если эти...

EUVD-2026-94366

A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text processing. This issue causes the application to crash unexpectedly, resulting in a Denial of Service DoS...

CVE-2026-107169

A flaw exists in m17n-lib within the read_mtext_element() function. An attacker can provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text processing. This vulnerability leads to an unexpected application crash, resulting in a Denial of Ser...

CVE-2026-107169

A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text processing. This issue causes the application to crash unexpectedly, resulting in a Denial of Service DoS. Mitigation Mitigation for this...

CVE-2026-107168

A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing function to enter an infinite loop. This issue leads to sustained high CPU utilization, resulting in a Denial of Service DoS for the affected application...

EUVD-2026-94313

A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing function to enter an infinite loop. This issue leads to sustained high CPU utilization, resulting in a Denial of Service DoS for the affected application...

mosh

Mosh: the mobile shell Mosh is a remote terminal application that supports intermittent connectivity, allows roaming, and provides speculative local echo and line editing of user keystrokes. It aims to support the typical interactive uses of SSH, plus: Mosh keeps the session alive if the client...

CVE-2026-106122

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by...

CVE-2026-106122 RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by...

CVE-2021-4034

CVE-2021-4034 $ make cc -Wall --shared -fPIC -o pwnkit.so pwnkit.c cc -Wall cve-2021-4034.c -o cve-2021-4034 echo "module UTF-8// PWNKIT// pwnkit 1" gconv-modules mkdir -p GCONVPATH=. cp /usr/bin/true GCONVPATH=./pwnkit.so:. $ ./cve-2021-4034 whoami root exit...

pgadmin4-9.10-CVE-2025-13780

pgadmin4 9.11 Выполнение команд в обход фильтра мета-команд Краткое описание Фильтр мета-команд для восстановления в формате PLAIN, добавленный в pgAdmin в рамках исправления Issue 9320, не обнаруживает мета-команды, когда SQL-файл начинается с UTF-8 BOM EF BB BF или других специальных...

CVE-2019-9053

CVE-2019-9053 Эксплойт CVE-2019-9053 для Python 3 Последняя проверка: 28-12-2021 Проверено на: Python 3.10.1 Источник оригинального эксплойта: https://www.exploit-db.com/exploits/46635 Пользователи несут полную ответственность за любые действия, совершённые с использованием этого инструмента. Есл...

Astra Linux – Vulnerability in libxml-parser-perl

Versions of XML::Parser from 2.45 onwards for Perl may overflow the pre-allocated buffer size, leading to heap corruption double-free or corruption and crashes. The A:utf8 PerlIO layer, using the parsestream function in Expat.xs, may cause the XML input buffer to overflow. This is because Perl’s...

CVE-2025-13780

CVE-2025-13780: pgAdmin 4 = 8.14 RCE Scanner Комплексный сканер уязвимости CVE-2025-13780 — удаленного выполнения кода RCE в pgAdmin 4 версий ≤ 8.14. 🔍 Детали уязвимости Уязвимость существует в функции Restore pgAdmin 4. Приложение пытается заблокировать опасные команды оболочки начинающиеся с \ ...

CVE-2025-1094-Lab-Setup

🛠️ Лабораторная среда CVE-2025-1094 ⚠️ Дисклеймер Данная лабораторная работа предназначена только для образовательных и исследовательских целей. НЕ используйте информацию или методы, продемонстрированные здесь, на системах, которыми вы не владеете или на тестирование которых у вас нет явного...

PyJWT BOM Bypass

Affected Package- Package: PyJWT pyjwt on PyPI- Repository: https://www.google.com/url?q=https://github.com/jpadilla/pyjwt=gmail=1781794518474000=E- Affected version: 2.13.0- Vulnerability class: Algorithm confusion / patch bypass--- Root CausePyJWT 2.13.0 introduced a guard in...

Rocky Linux 8 [CIQ] Security Update: libsoup / libsoup-debuginfo / libsoup-debugsource / libsoup-devel (crlsa-2025_0838)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20250838 advisory. libsoup: buffer overflow via UTF-8 conversion in soupheaderparseparamliststrict CVE-2024-52531 Tenable has extracted the preceding description block directly from t...

Rocky Linux 9 [CIQ] Security Update: perl-XML-LibXML / perl-XML-LibXML-debuginfo / etc (crlsa-2026_39553)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202639553 advisory. perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names CVE-2026-8177 Tenable has extracted the preceding description block directly...