CVE-2021-48018

Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as contract storage variables. When a function using @nonreentrant is called, setting the lock overwrites the overlapping storage variable, corrupting contract state and breaking the...

CVE-2021-48018 Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator

Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as contract storage variables. When a function using @nonreentrant is called, setting the lock overwrites the overlapping storage variable, corrupting contract state and breaking the...

CVE-2021-48018

The Vyper compilation tool, versions 0.2.13 through 0.2.14 , is vulnerable to storage corruption due to a flaw in the @nonreentrant decorator. The compiler incorrectly allocates storage slots for reentrancy locks at the same locations as contract storage variables. Consequently, executing a funct...

CVE-2021-48018 Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator

Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as contract storage variables. When a function using @nonreentrant is called, setting the lock overwrites the overlapping storage variable, corrupting contract state and breaking the...

EUVD-2021-34888

Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as contract storage variables. When a function using @nonreentrant is called, setting the lock overwrites the overlapping storage variable, corrupting contract state and breaking the...

CVE-2021-48018

Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as contract storage variables. When a function using @nonreentrant is called, setting the lock overwrites the overlapping storage variable, corrupting contract state and breaking the...

PT-2026-120824

Name of the Vulnerable Software and Affected Versions itsourcecode Online Cake Ordering System version 1.0 Description A remote SQL injection is possible due to improper handling of the prcd variable within the /inserttrans.php endpoint. SQL injection is a technique where an attacker inserts...

PT-2026-120833

Name of the Vulnerable Software and Affected Versions Pillow versions 11.0.0 through 12.x Description Multi-frame loaders in this Python imaging library can retain an ImagingCore allocation created for a narrow frame mode. When a subsequent frame of the same dimensions changes the logical mode an...

CVE-2021-48018: Out-of-bounds Write

Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as contract storage variables. When a function using @nonreentrant is called, setting the lock overwrites the overlapping storage variable, corrupting contract state and breaking the...

WebXR Interface Access Protected Information

The WebXR interface vulnerability in Google Chrome and Microsoft Edge is related to errors in variable initialization. Exploiting this vulnerability allows a remote attacker to gain access to protected information via a specially crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-109828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing...

RHEL 9 : sudo (RHSA-2026:86635)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:86635 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

SUSE SLES15 Security Update : python-hpack (SUSE-SU-2026:4593-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4593-1 advisory. This update for python-hpack fixes the following issue: - CVE-2026-59980: unbounded variable integer decoding can cause run-away computation...

Wireshark 1.10.x < 1.10.1 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.10.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.1 advisory. - The IsDFPFrame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in...

Exasol Database 7.1.30 - command execution

Title: Exasol Database 7.1.30 - command execution Author: 0day Rubbish Research Team Contact: [email protected] Type: remote Platform: Linux Advisory: https://0day-rubbish.com/blog/exasol-database-default-credential-python-udf-os-popen-rce CVE: pending Description: Exasol Database 7.1.3...

PT-2026-120670

Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to change mail routing and domain configuration beyond those domains on a multi-tenant server. A doma...

PT-2026-120508

Name of the Vulnerable Software and Affected Versions OnePlus OxygenOS versions 16.1.0 through 16.1.10.499 OnePlus OxygenOS versions 16.0.0 through 16.0.5.1199 OnePlus OxygenOS versions 15.0.0 through 15.0.0.1999 Description An OS command injection and missing authorization issue exists in OnePlu...

PT-2026-120671

Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin role with a list of domains - a credential an administrator may create meaning to confine it to those domains - to act as the whole-server...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792445930)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792445930 advisory. - In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Just leak decrypted memory on unrecoverable...

PT-2026-120831

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description In the Pillow Python imaging library, the MpoImageFile.seek and DcxImageFile.seek functions reparse subsequent MPO or DCX frames and update the self. size variable without re-executing the Image...