CVE-2026-112257 Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)

A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash...

CVE-2026-112257

A heap out-of-bounds read and write vulnerability exists in GIMP within the PSD thumbnail resource loader (specifically load_resource_1033). The flaw occurs because the loader performs a BGR-to-RGB channel swap using a fixed 3-byte stride without verifying that the JPEG thumbnail is actually in R...

CVE-2026-112257

A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash...

CVE-2026-112258

A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection property. Opening a crafted XCF file can cause a use-after-free in the main GIMP process, leading to a crash and potentially arbitrary code...

CVE-2026-112257

A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash...

cve-2021-4034

cve-2021-4034...

Starlink-FI

Starlink User Terminal Modchip This repository accompanies the talk titled "Glitched on Earth by Humans: A Black-Box Security Evaluation of the SpaceX Starlink User Terminal". A slide deck is available here, a recording of the talk should be available soon. The talk covers how we managed to execu...

EUVD-2026-104600

The OSDP Control Panel reply parser cpdecoderesponse in subsys/mgmt/osdp/src/osdpcp.c decodes replies from a Peripheral Device into a stack-allocated struct osdpevent. For the REPLYKEYPPAD and REPLYRAW reply types, the payload length is taken from the received frame and the only validation...

CVE-2025-4322-Exploit

CVE-2025-4322 - Unverified Password Change CWE-620 Exploit: Download here Details CVE ID : CVE-2025-4322 Published : 05/20/2025 Impact : Critical CVSS : 9.8 Patch Available: No official patch yet Impact Critical severity vulnerability that enables attackers to potentially: - Escape the browser's...

CVE-2026-82166

Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution...

CVE-2026-71170

Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to an Elevation of Privilege and arbitrary code execution...

CVE-2023-25581

This Python script demonstrates the exploitation of the CVE-2023-25581 vulnerability in pac4j-core. The vulnerability allows an attacker to execute arbitrary code RCE by deserializing maliciously crafted Base64-encoded data. Prerequisites Before running the script, make sure you have the followin...

CVE-2026-82166

Dell Application Store versions prior to 26.05.0.7 are vulnerable to a Missing Authentication for Critical Function vulnerability (CWE-306). An unauthenticated attacker with adjacent network access can exploit this flaw to achieve arbitrary code execution . No specific exploit details or in-the-w...

CVE-2026-82166

Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution...

EUVD-2026-104592

Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution...

EUVD-2026-104591

Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to an Elevation of Privilege and arbitrary code execution...

CVE-2026-71170

Dell Application Store versions prior to 26.05.0.7 are vulnerable to an Uncontrolled Path Element vulnerability (CWE-427). A low privileged attacker with local access could exploit this flaw to achieve Elevation of Privilege and perform arbitrary code execution . No specific exploitation details ...

CVE-2026-71170

Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to an Elevation of Privilege and arbitrary code execution...

CVE-2026-73800

A flaw was found in Gitea. When executing an automated workflow triggered by a pull request, Gitea improperly loads local reusable workflow definitions from the untrusted fork rather than the trusted target repository. A remote attacker submitting a pull request can exploit this flaw to achieve...

CVE-2026-73539

A flaw was found in Gitea. This vulnerability allows an attacker to achieve arbitrary code execution by injecting unintended arguments into external markup rendering commands. When handling markup requests, Gitea fails to sanitize URL reference paths before command argument processing. If an...