OSV-2026-1026 Global-buffer-overflow in txt2sd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530698821 Crash type: Global-buffer-overflow READ 1 Crash state: txt2sd fuzzmdnsxht.cc...

OSV-2026-707 Global-buffer-overflow in txt2sd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511056140 Crash type: Global-buffer-overflow READ 1 Crash state: txt2sd fuzzmdnsxht.cc...

open62541:fuzz_mdns_xht_15: Global-buffer-overflow in txt2sd

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6738070941794304 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzmdnsxht15 Job Type: aflasanopen62541 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

open62541:fuzz_mdns_xht: Heap-buffer-overflow in txt2sd

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5056181008924672 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzmdnsxht Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

CVE-2026-31868

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.4 and 8.6.30, an attacker can upload a file with a file extension or content type that is not blocked by the default configuration of the Parse Server...

CVE-2026-31868 Parse Server has Stored XSS via file upload of HTML-renderable file types

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.4 and 8.6.30, an attacker can upload a file with a file extension or content type that is not blocked by the default configuration of the Parse Server...

CVE-2026-31868

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.4 and 8.6.30, an attacker can upload a file with a file extension or content type that is not blocked by the default configuration of the Parse Server...

CVE-2008-2309: Undefined Security Weakness

Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.4 allows user-assisted remote attackers to execute arbitrary code via a 1 .xht or 2 .xhtm file, which does not trigger a "potentially unsafe" warning message in a the Download Validation feature in Mac OS X 10.4 or b th...