https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:20:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-308234 EUVD-2026-308234 https://cve.radiocsirt.org/vuln/euvd-2026-308234 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42482 <p>A stack-based buffer overflow in mangle_to_hex_lower() and mangle_to_hex_upper() in src/rp_cpu.c in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted rule file, or via the -j or -k rule options used with password candidates of 128 or more characters. The vulnerability is caused by a bounds check that fails to account for the 2x expansion that occurs when password bytes are converted to hexadecimal.</p> <p>A stack-based buffer overflow in mangle_to_hex_lower() and mangle_to_hex_upper() in src/rp_cpu.c in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted rule file, or via the -j or -k rule options used with password candidates of 128 or more characters. The vulnerability is caused by a bounds check that fails to account for the 2x expansion that occurs when password bytes are converted to hexadecimal.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-42482 https://cve.radiocsirt.org/vuln/ghsa-vrww-7rmp-3xrm <p>A stack-based buffer overflow in mangle_to_hex_lower() and mangle_to_hex_upper() in src/rp_cpu.c in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted rule file, or via the -j or -k rule options used with password candidates of 128 or more characters. The vulnerability is caused by a bounds check that fails to account for the 2x expansion that occurs when password bytes are converted to hexadecimal.</p> <p>A stack-based buffer overflow in mangle_to_hex_lower() and mangle_to_hex_upper() in src/rp_cpu.c in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted rule file, or via the -j or -k rule options used with password candidates of 128 or more characters. The vulnerability is caused by a bounds check that fails to account for the 2x expansion that occurs when password bytes are converted to hexadecimal.</p> https://cve.radiocsirt.org/vuln/ghsa-vrww-7rmp-3xrm https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-42482 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: hashcat, Ubuntu:20.04:LTS: hashcat, Ubuntu:22.04:LTS: hashcat, Ubuntu:24.04:LTS: hashcat, Ubuntu:25.10: hashcat, Ubuntu:26.04:LTS: hashcat</p> <p>A stack-based buffer overflow in mangle_to_hex_lower() and mangle_to_hex_upper() in src/rp_cpu.c in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted rule file, or via the -j or -k rule options used with password candidates of 128 or more characters. The vulnerability is caused by a bounds check that fails to account for the 2x expansion that occurs when password bytes are converted to hexadecimal.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: hashcat, Ubuntu:20.04:LTS: hashcat, Ubuntu:22.04:LTS: hashcat, Ubuntu:24.04:LTS: hashcat, Ubuntu:25.10: hashcat, Ubuntu:26.04:LTS: hashcat</p> <p>A stack-based buffer overflow in mangle_to_hex_lower() and mangle_to_hex_upper() in src/rp_cpu.c in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted rule file, or via the -j or -k rule options used with password candidates of 128 or more characters. The vulnerability is caused by a bounds check that fails to account for the 2x expansion that occurs when password bytes are converted to hexadecimal.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-42482