Lucene search
+L

26 matches found

SUSE CVE
SUSE CVE
added 2026/07/24 2:20 a.m.12 views

SUSE CVE-2026-52688

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...

7.5CVSS5.8AI score0.00127EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/23 8:3 a.m.8 views

CVE-2026-52688 RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...

7.5CVSS5.8AI score
SaveExploits0References5
EUVD
EUVD
added 2026/07/23 8:3 a.m.10 views

EUVD-2026-47930

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...

7.5CVSS5.3AI score0.00127EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2026/07/23 8:3 a.m.8 views

CVE-2026-52688

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...

7.5CVSS5.8AI score0.00127EPSS
SaveExploits0
OSV
OSV
added 2026/07/14 9:41 p.m.11 views

JLSEC-2026-740 A 1-byte stack buffer over-read was identified in the MatchDomainName function (`src/internal.c`)...

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

5.3CVSS6AI score0.00228EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/06/05 7:49 p.m.15 views

CVE-2026-5772

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

5.3CVSS5.6AI score0.00228EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/10 12:30 a.m.8 views

EUVD-2026-21218

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

2.1CVSS6AI score0.00228EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/09 9:50 p.m.5 views

CVE-2026-5772

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

2.1CVSS6AI score0.00228EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2026/04/09 9:50 p.m.9 views

CVE-2026-5772

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

5.3CVSS5.4AI score0.00228EPSS
SaveExploits0
OSV
OSV
added 2026/04/09 9:50 p.m.7 views

CVE-2026-5772 MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

2.1CVSS6.1AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/09 9:50 p.m.4 views

CVE-2026-5772 MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

2.1CVSS6AI score0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/09 9:50 p.m.43 views

CVE-2026-5772 MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

2.1CVSS0.00228EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/12/30 4:31 a.m.497 views

Exploit for Improper Neutralization of Wildcards or Matching Symbols in Laravel Framework

CVE-2025-27515 Proof of Concept A practical demonstration of...

9.8CVSS7.2AI score0.00721EPSS
SaveExploits1
EUVD
EUVD
added 2025/10/03 8:7 p.m.14 views

EUVD-2025-6153

Malicious code in bioql PyPI...

9.8CVSS6.3AI score0.00721EPSS
SaveExploits1References4
OSV
OSV
added 2025/04/14 11:10 a.m.18 views

BIT-LARAVEL-2025-27515 Laravel has a File Validation Bypass

Laravel is a web application framework. When using wildcard validation to validate a given file or image field files., a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1...

9.8CVSS6.1AI score0.00721EPSS
SaveExploits1References3
Veracode
Veracode
added 2025/03/10 4:23 p.m.18 views

Improper Neutralization

laravel/framework is vulnerable to Improper Neutralization. The vulnerability is due to improper validation enforcement due to the incorrect handling of wildcard validation files., allowing user-crafted malicious requests to bypass file or image validation rules...

9.8CVSS6.7AI score0.00721EPSS
SaveExploits1References5Affected Software1
Snyk
Snyk
added 2025/03/05 7:41 p.m.4 views

Improper Neutralization

Overview Affected versions of this package are vulnerable to Improper Neutralization in Validator.php via wildcard validation for file or image fields, such as files.. This allows a user to bypass validation rules. Remediation Upgrade macropay-solutions/laravel-crud-wizard-free to version 3.4.17 ...

9.8CVSS6.8AI score0.00721EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/03/05 7:41 p.m.4 views

Improper Neutralization

Overview laravel/framework is a PHP framework for web artisans. Affected versions of this package are vulnerable to Improper Neutralization in Validator.php via wildcard validation for file or image fields, such as files.. This allows a user to bypass validation rules. Remediation Upgrade...

9.8CVSS6.9AI score0.00721EPSS
SaveExploits1References2
OSV
OSV
added 2025/03/05 7:15 p.m.5 views

DEBIAN-CVE-2025-27515

Laravel is a web application framework. When using wildcard validation to validate a given file or image field files., a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1...

9.8CVSS5.3AI score0.00721EPSS
SaveExploits1References1
NVD
NVD
added 2025/03/05 7:15 p.m.47 views

CVE-2025-27515

Laravel is a web application framework. When using wildcard validation to validate a given file or image field files., a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1...

9.8CVSS0.00721EPSS
SaveExploits1References2
Rows per page
Query Builder