Lucene search
+L

35 matches found

NVD
NVD
•added 2026/10/29 4:18 p.m.•3 views

CVE-2026-119124

ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bounds of a heap buffer. An attacker can supply a crafted image that, when processed by a user with the -morph option, corrupts heap memory and crashes the...

4.8CVSS
SaveExploits0References2
CVE
CVE
•added 2026/10/29 3:58 p.m.•6 views

CVE-2026-119124

Versions of ImageMagick prior to 7.1.2-34 are vulnerable to a heap-based buffer overflow within the -morph processing function. A local attacker can provide a crafted image that, when processed using the -morph option, triggers a write beyond the bounds of a heap buffer. This memory corruption ca...

4.8CVSS6AI score
SaveExploits0References2
osv_cve
osv_cve
•added 2026/10/29 3:58 p.m.•4 views

CVE-2026-119124 ImageMagick before 7.1.2-34 Heap Buffer Overflow via -morph Option

ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bounds of a heap buffer. An attacker can supply a crafted image that, when processed by a user with the -morph option, corrupts heap memory and crashes the...

4.8CVSS6AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/10/29 3:58 p.m.•3 views

EUVD-2026-113191

ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bounds of a heap buffer. An attacker can supply a crafted image that, when processed by a user with the -morph option, corrupts heap memory and crashes the...

4.8CVSS6AI score
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2026/08/30 12:00 a.m.•14 views

Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection

Face recognition systems are increasingly deployed in security-critical applications, yet they remain vulnerable to presentation and morph attacks. Presentation attack detection PAD and morphing attack detection MAD are therefore essential components of trustworthy face biometrics. Despite...

5.9AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/07/27 12:00 a.m.•25 views

On the Use of Synthetic Data for Threshold Calibration in Face Recognition: Performance and Security Implications for Border Control Systems

The recently deployed Entry/Exit System EES introduces large-scale biometric verification into European border control, requiring face recognition systems to operate at extremely low false match rates FMR. While regulatory frameworks define performance targets at the EES Central System level, the...

5.9AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/14 5:09 a.m.•33 views

Malicious code in string-morph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2321f2779aa9d5215d5d6d39826da4494df38ce8c6d89e6b21ad78a27511e07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.1AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/07/14 5:09 a.m.•4 views

Malware in string-morph

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2026/07/14 5:09 a.m.•14 views

Malicious Package

Overview string-morph is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.1AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/07/14 5:09 a.m.•25 views

MAL-2026-10567 Malicious code in string-morph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2321f2779aa9d5215d5d6d39826da4494df38ce8c6d89e6b21ad78a27511e07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.1AI score
SaveExploits0References1
Snyk
Snyk
•added 2025/11/30 1:14 p.m.•23 views

Malicious Package

Overview tailwind-morph is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...

9.8CVSS7.2AI score
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2009-3320

Malware in sbrugna...

9.3CVSS6.4AI score0.05789EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2019-6158

Malware in sbrugna...

7.5CVSS7.3AI score0.01601EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2025-29489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libming v0.4.8 was discovered to contain a memory leak via the parseSWFMORPHLINESTYLES function. CVE-2025-29489 Note that Nessus relies on the presence of the...

6.5CVSS5.5AI score0.00348EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/22 10:20 a.m.•22 views

CVE-2019-15080

An issue was discovered in a smart contract implementation for MORPH Token through 2019-06-05, an Ethereum token. A typo in the constructor of the Owned contract which is inherited by MORPH Token allows attackers to acquire contract ownership. A new owner can subsequently obtain MORPH Tokens for...

7.5CVSS7.3AI score0.01601EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2025/03/27 3:16 p.m.•48 views

UBUNTU-CVE-2025-29489

libming v0.4.8 was discovered to contain a memory leak via the parseSWFMORPHLINESTYLES function...

6.5CVSS5.5AI score0.00348EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu
•added 2025/03/27 3:16 p.m.•38 views

UBUNTU-CVE-2025-29497

libming v0.4.8 was discovered to contain a memory leak via the parseSWFMORPHFILLSTYLES function...

6.5CVSS5.6AI score0.00348EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/03/27 12:00 a.m.•22 views

libming information leakage vulnerability

libming is an open source Flash SWF output library written in C by Ming. A security vulnerability exists in libming version 0.4.8, which stems from a memory leak in the parseSWFMORPHFILLSTYLES function...

6.5CVSS5.5AI score0.00348EPSS
SaveExploits1References3
vulnersOsv
vulnersOsv
•added 2021/03/12 8:24 p.m.•4 views

ai.databand.azkaban:azkaban-web-server (3.18.0), at.ganzleicht.vaadin:vaadin-maven-plugin (>=9.1.1, <=9.1.3.2) +1326 more potentially affected by CVE-2020-13959 via org.apache.velocity:velocity-tools (>=2.0-beta3, <=2.0)

org.apache.velocity:velocity-tools MAVEN version =2.0-beta3, =9.1.1, =1.0.0-alpha-2, =1.0.0, =0.1, =2.1-beta1, =1.2.1, =1.0.0, =0.0.1.alpha, =0.0.1.alpha, =1.2.28, =1.0.0, =1.1.0 and more Source cves: CVE-2020-13959 Source advisory: OSV:GHSA-FH63-4R66-JC7V...

6.1CVSS0.05723EPSS
SaveExploits0
osv_cve
osv_cve
•added 2020/12/30 8:15 p.m.•19 views

CVE-2019-15080

An issue was discovered in a smart contract implementation for MORPH Token through 2019-06-05, an Ethereum token. A typo in the constructor of the Owned contract which is inherited by MORPH Token allows attackers to acquire contract ownership. A new owner can subsequently obtain MORPH Tokens for...

7.5CVSS7.1AI score0.01601EPSS
SaveExploits1References2
Rows per page
Query Builder