1969 matches found
CVE-2024-41817-poc
ImageMagick Arbitrary Code Execution CVE-2024-41817 Proof of Concept exploit for ImageMagick versions = 9.4.0 Python packages: paramiko Installation git clone https://github.com/Dxsk/CVE-2024-41817-poc/ cd CVE-2024-41817-poc pip install -r requirements.txt Usage Auto-detect vulnerable version:...
CVE-2025-8088
Security Analysis: Path Traversal Exploitation in WinRAR CVE-2025-8088 Note: Repository under development. This project will receive future updates with additional analyses, analysis scripts non-exploit, and presentation material. New versions will be published as soon as they are available. This...
Linux Distros Unpatched Vulnerability : CVE-2026-107676
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in avdynamichdrplustot35 that leaves up to three payload bytes uninitialized when...
Use of Uninitialized Resource
Overview Affected versions of this package are vulnerable to Use of Uninitialized Resource in the avdynamichdrplustot35 function when processing HDR10+ metadata. An attacker can access sensitive process memory by supplying crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata, causing...
DEBIAN-CVE-2026-107676
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in avdynamichdrplustot35 that leaves up to three payload bytes uninitialized when tonemappingflag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcodin...
CVE-2026-107676
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in avdynamichdrplustot35 that leaves up to three payload bytes uninitialized when tonemappingflag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcodin...
UBUNTU-CVE-2026-107676
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in avdynamichdrplustot35 that leaves up to three payload bytes uninitialized when tonemappingflag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcodin...
CVE-2026-107676
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in avdynamichdrplustot35 that leaves up to three payload bytes uninitialized when tonemappingflag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcodin...
CVE-2026-107676
FFmpeg versions through 9.0.2 are vulnerable to an uninitialized memory disclosure within the av_dynamic_hdr_plus_to_t35() function. When the tone_mapping_flag is set to 0, the function fails to initialize up to three payload bytes. An attacker can exploit this by providing crafted Matroska T.35 ...
CVE-2026-107676 FFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata Serializer
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in avdynamichdrplustot35 that leaves up to three payload bytes uninitialized when tonemappingflag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcodin...
CVE-2026-107676
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in avdynamichdrplustot35 that leaves up to three payload bytes uninitialized when tonemappingflag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcodin...
EUVD-2026-95081
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in avdynamichdrplustot35 that leaves up to three payload bytes uninitialized when tonemappingflag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcodin...
CVE-2026-107676
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in avdynamichdrplustot35 that leaves up to three payload bytes uninitialized when tonemappingflag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcodin...
CVE-2026-107676: Use of Uninitialized Resource
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in avdynamichdrplustot35 that leaves up to three payload bytes uninitialized when tonemappingflag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcodin...
PT-2026-108037
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 9.0.3 Description An uninitialized memory disclosure exists in the av dynamic hdr plus to t35 function. When the tone mapping flag is 0, up to three payload bytes remain uninitialized. An attacker can provide specially...
CLSA-2026-1791107509 TuxCare security update for org.springframework (35 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 35 CVEs. Fixed in 5.0.0.RELEASE-tuxcare.1...
Malicious Package
Overview aril-35 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
CVE-2026-8400
creationtimestamp| type| source ---|---|--- 2026-08-05 17:02:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117043976914506002...
CLSA-2026-1770595754 TuxCare security update for 35 packages (2 CVEs)
TuxCare rebuilt 35 packages to address 2 CVEs. Fixed in 8.5.100-tuxcare.6...
CVE-2026-67352
creationtimestamp| type| source ---|---|--- 2026-08-01 15:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqeg7et72t 2026-08-01 22:01:30+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3ms2htcd2ts2r 2026-08-01 22:01:30+00:00| seen|...