msxml4-remediation

MSXML 4.0 Remediation PowerShell PowerShell script to remediate security findings related to Microsoft XML Core Services MSXML 4.0 , which is unsupported and commonly flagged by vulnerability scanners. This script I made unregisters the .dll files for MSXML 4 and renames them. This remediates the...

CVE-2021-33104

CVE-2021-33104 Intel Advisory - Improper access control in the IntelR OFU software before version 14.1.28 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00769.html...

smack

SMACK is both a modular software verification toolchain and a self-contained software verifier. It can be used to verify the assertions in its input programs. In its default mode, assertions are verified up to a given bound on loop iterations and recursion depth; it contains experimental support...

swsim

swSIM Project needs to be cloned recursively. Downloading the ZIP is not enough. swSIM is an all-software SIM card. It's the first publicly available to the best of my knowledge SIM card simulator which does not rely on any SIM hardware to work. Scope A software-only SIM card simulator. It does N...

jsonorg-fn1

json.org CVE-2022-45688 false negative The project illustrates CVE-2022-45688 in json.org -- there is a simple application XML2JSONConverter to read XML from input, convert it to JSON and pretty-print it to the console. Using malicious input, the application crashes with a stackoverflow. The test...

CVE-2026-114119

Best Practice Software Bp Premier versions prior to 1.14.1.1128 contain a hardcoded Microsoft SQL Server administrative password shared across all installations. This credential cannot be modified without breaking the application. An attacker with network access to the database instance can use t...

EUVD-2026-106922

Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can authenticate as sysadmin,...

SMG Software Information Portal Shell Upload / Command Injection

SMG Software Information Portal versions prior to 13.06.2025 contain an unrestricted dangerous-file upload and OS command injection vulnerability...

CVE-2026-113717

A flaw was found in virtualenv. When creating an environment using the pip seeder with the download option, the tool bypasses its package digest verification routines. A remote attacker controlling a package index could exploit this flaw to provide modified package files without triggering expect...

CVE-2026-113714

A flaw was found in virtualenv. The utility writes downloaded software packages directly into its reusable cache before completing integrity verification checks. An attacker controlling a package repository can exploit this flaw to retain rejected or manipulated packages in the cache, resulting i...

panopticon

DEPRECATED The Panopticon project moved toGitlab and was restructed into multiple crates. The Qt GUI was replaced with Verso. I will merge PRs but won't do any substantial work on this version. Most links below are dead. Panopticon - A Libre Cross Platform Disassembler Panopticon is a cross...

CVE-2026-91059

The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second SOF0 frame header after SOS re-runs the frame header parser after the output buffer has already been allocated and its geometry latched. The decoder returns GXSUCCESS and publishes a GXPIXELMAP whose...

CVE-2026-92454

The GUIX software JPEG decoder is vulnerable to an out-of-bounds read and a non-terminating loop when GX_SOFTWARE_DECODER_SUPPORT is enabled. The decoder fails to verify that four kinds of marker segments are long enough, causing truncated segments to be read past the end of the caller's image bu...

CVE-2026-92454 JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode

The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what it reads. A truncated segment is therefore read past the end of the caller's image buffer. Separately, a zero chroma sampling factor makes the block decode loop non-terminating...

CVE-2026-91059

The GUIX JPEG software decoder is vulnerable to an out-of-bounds read (CWE-125) because it does not enforce ordering on JPEG markers. A crafted file containing a second SOF0 frame header after an SOS marker causes the decoder to re-run the frame header parser after the output buffer is already al...

EUVD-2026-105042

The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second SOF0 frame header after SOS re-runs the frame header parser after the output buffer has already been allocated and its geometry latched. The decoder returns GXSUCCESS and publishes a GXPIXELMAP whose...

CVE-2026-91059 JPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation size

The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second SOF0 frame header after SOS re-runs the frame header parser after the output buffer has already been allocated and its geometry latched. The decoder returns GXSUCCESS and publishes a GXPIXELMAP whose...

CVE-2023-40868

CVE-2023-40868 Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions. The vulnerability is a Cross-Site Request Forgery CSRF vulnerability in the mooSocial MooSocial Softwa...

CVE-2021-3438

CVE-2021-3438 A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege...

CVE-2023-40869

CVE-2023-40869 Cross Site Scripting vulnerability in mooSocial mooSocial Software v.3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions XSS STORE via CSRF. Paths Affected...