101290 matches found
CVE-2026-76788 Stack out-of-bounds write in the OSDP Control Panel reply parser
The OSDP Control Panel reply parser cpdecoderesponse in subsys/mgmt/osdp/src/osdpcp.c decodes replies from a Peripheral Device into a stack-allocated struct osdpevent. For the REPLYKEYPPAD and REPLYRAW reply types, the payload length is taken from the received frame and the only validation...
CVE-2026-76788 Stack out-of-bounds write in the OSDP Control Panel reply parser
The OSDP Control Panel reply parser cpdecoderesponse in subsys/mgmt/osdp/src/osdpcp.c decodes replies from a Peripheral Device into a stack-allocated struct osdpevent. For the REPLYKEYPPAD and REPLYRAW reply types, the payload length is taken from the received frame and the only validation...
hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request
A flaw was found in hostapd. An unauthenticated attacker within wireless range can send a specially crafted management frame during Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing. This crafted frame, containing a malformed Multi-Link Element or Per-STA Profile...
hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request
A flaw was found in hostapd. An unauthenticated attacker within wireless range can send a specially crafted management frame during Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing. This crafted frame, containing a malformed Multi-Link Element or Per-STA Profile...
vivo_iqoo_neo_9_root_research_on_CVE-2025-21479
vivo iQOO Neo 9 Root Research CVE-2025-21479 This project is the result of local privilege escalation research based on CVE-2025-21479 a Qualcomm Adreno A7xx GPU firmware logic vulnerability, the target device is the vivo iQOO Neo 9 Snapdragon 8 Gen 2 / Adreno 740 / A7xx series GPU. The repositor...
CVE-2026-110680
Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encodehv. With canonical, the keys of a tied or threads::shared hash are counted before a second pass collects them for sorting. The encoder uses a fixed...
CVE-2026-98532
A flaw was found in the Linux kernel. A remote attacker could cause a Denial of Service DoS or memory corruption by sending specially crafted IPv6 network packets. The IPv6 extension header parsing mechanism fails to verify that the declared length of a header fits within the received packet data...
CVE-2026-96233
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2023-50245
CVE-2023-50245 Vulnerability Overview CVE-2023-50245 CVSS : 9.8 Dec 11, 2023 Image Viewer Vulnerability Vulnerability Description github advisories arbitrary address write vulnerability POC 1 1404.9264: Access violation - code c0000005 first chance First chance exceptions are reported before any...
CVE-2026-11319
TickTick Android application com.ticktick.task 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename vi...
CVE-2026-110680 Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv
Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encodehv. With canonical, the keys of a tied or threads::shared hash are counted before a second pass collects them for sorting. The encoder uses a fixed...
CVE-2026-110680 Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv
Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encodehv. With canonical, the keys of a tied or threads::shared hash are counted before a second pass collects them for sorting. The encoder uses a fixed...
CVE-2026-110680
The Cpanel::JSON::XS Perl module, versions 4.20 through 4.79 , is vulnerable to a write out of bounds error during canonical encoding in the encode_hv function. The issue occurs when a tied or threads::shared hash grows between a counting pass and a subsequent collection pass for sorting. Because...
CVE-2026-110680
Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encodehv. With canonical, the keys of a tied or threads::shared hash are counted before a second pass collects them for sorting. The encoder uses a fixed...
EUVD-2026-104560
Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encodehv. With canonical, the keys of a tied or threads::shared hash are counted before a second pass collects them for sorting. The encoder uses a fixed...
CVE-2026-11319
The TickTick Android application (com.ticktick.task) version 8.2.2.0 is vulnerable to a path traversal vulnerability within its exported ShareReceiveActivity . A malicious local application can trigger this by sending a crafted content:// URI via ACTION_SEND intents. The root cause is the unsanit...
EUVD-2026-104525
TickTick Android application com.ticktick.task 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename vi...
CVE-2026-11319 TickTick Android 8.2.2.0 Path Traversal via ShareReceiveActivity
TickTick Android application com.ticktick.task 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename vi...
CVE-2026-11319 TickTick Android 8.2.2.0 Path Traversal via ShareReceiveActivity
TickTick Android application com.ticktick.task 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename vi...