Exploit for CVE-2026-97332

CVE-2026-97332 — WordPress User Private Files !NOTE This...

ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index

Summary SixLabors.ImageSharp can terminate a process when an application decodes an attacker-supplied 32-bit floating-point TIFF as Image and applies HistogramEqualization. An IEEE positive-infinity TIFF sample reaches a non-finite or otherwise out-of-range HalfVector4 component, depending on the...

Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method

Summary hydra-optuna-sweeper accepted a configuration-controlled dotted path in hydra.sweeper.customsearchspace, resolved it with the lower-level hydra.utils.getmethod API, and later invoked the returned callable. Hydra's object-lookup helpers intentionally trust their input and do not apply the...

Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows

Summary ColumnNameToNumber lib.go:220-237 accumulates the bijective base-26 value of a column name in an int64 with only an upper-bound check col MaxColumns applied after the loop and no overflow detection. A 14-letter column name whose true value is 3·2⁶⁴ — e.g. VGWQHXLSDVIKWV — wraps to col = 0...

Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref

Summary A worksheet containing makes mergeCellsParser leave the cached rectangle empty, and cellInRange then indexes that empty slice without a length check. Every non-streaming cell API panics with index out of range 0 with length 0 on the first cell read after opening the file. Where it is...

Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API

Affected versions and vulnerable location - Confirmed at ae2113b current HEAD. - Sink: rows.go:967 ws.SheetData.RowrowIdx.CcolNum-1 = colData inside checkRow. - checkRow computes lastCol from the column of the last cell in document order rows.go:940, allocates targetList of that length, then...

Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader

Summary A Zip64 uncompressed-size of 2^63 casts to a negative int64 that bypasses the unzip-size guard and reaches makebyte, 0, negativeCap A Zip64 uncompressed-size in the range 2^63, 2^64 casts to a negative int64 in zip.File.FileInfo.Size, and ReadZipReader does signed arithmetic on that value...

PraisonAI: Crawl4AI/Chromium backend is also affected by the `web_crawl` SSRF validation bypass

Summary The DNS-rebinding / redirect SSRF bypass in PRAI-05 is not limited to the httpx/urllib backend. When crawl4ai headless Chromium via Playwright is installed, webcrawl auto-selects provider=crawl4ai, and the headless browser re-resolves DNS and follows redirects on its own — with no...

coruna

Coruna — iOS Safari Sandbox Escape & Post-Exploitation C2 Fram...

Exploit for CVE-2026-105844

CVE-2026-105844 — Payload CMS import-export prototype pollutio...

Exploit for CVE-2026-102782

CVE-2026-102782 — OrdaSoft Simple Membership unauth SQLi Pyth...

Microsoft, Adobe, Apple, and Foxit vulnerabilities

Cisco Talos' Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco 's third-party vulnerability disclosure policy...

CVE-2026-107220

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.1 to 2.11.0, mergeCellsParser leaves the cached rectangle empty for an empty mergeCell ref and then passes that empty slice to cellInRange without a length check. GetCellValue reaches mergeCellsParser...

CVE-2026-107221

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML document order and then re-scatters every cell by its explicit column reference. GetCellValue reaches workSheetReader and...

Why API Security Belongs in ECB Cyber Action Plans

Discover how securing shadow and zombie APIs helps banks meet the ECB cyber action plan mandates, improve posture, and mitigate AI-enabled threats...

CVE-2026-103371 Apache Geode: Management REST API: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File in Apache Geode Web Management. This issue affects Apache Geode: from 2.0.0 before 2.0.3. Users are recommended to upgrade to version 2.0.3, which fixes the issue...

CVE-2026-107221 Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML document order and then re-scatters every cell by its explicit column reference. GetCellValue reaches workSheetReader and...

CVE-2026-107221 Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML document order and then re-scatters every cell by its explicit column reference. GetCellValue reaches workSheetReader and...

EUVD-2026-94551

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML document order and then re-scatters every cell by its explicit column reference. GetCellValue reaches workSheetReader and...

CVE-2026-107221

The Excelize Go library (versions 2.0.0 to 2.11.0 ) is vulnerable to an out-of-bounds write (CWE-787) during non-streaming worksheet read operations. The root cause lies in the checkRow function, which incorrectly sizes a target cell slice based on the last cell in XML document order. If a crafte...