PT-2026-106838

Name of the Vulnerable Software and Affected Versions ImageSharp versions 3.0.0 through 4.1.0 Description Decoding a strip TIFF using CCITT Group 3 or Modified Huffman compression allows the passing of attacker-expanded runs to BitWriterUtils.WriteBits without verifying the current row width...

ALSA-2026:76747 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command...

PT-2026-107180

A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates a buffer using a 32-bit width height and bytes-per-pixel product that can overflow. GEGL then writes the full uncompressed extent into th...

Windows-CVE-2024-38063

Windows CVE-2024-38063 ID CVE: CVE-2024-38063 Punteggio CVSS 3.1: 9.8 Critico Punteggio EPSS: Basso - 0.088% https://www.cvedetails.com/epss/CVE-2024-38063/epss-score-history.html Impatto: Esecuzione di codice remoto Componenti interessati: Stack TCP/IP di Windows Vettore d'attacco: Rete Remoto...

CVE-2025-5548

🐞CVE-2025-5548 Buffer overflow in FreeFloat FTP Server 1.0 🎯 Sfruttamento dello Stack Buffer Overflow Questo repository contiene la documentazione e lo sviluppo pratico di un progetto di cybersecurity incentrato sul reverse engineering e sullo sfruttamento di vulnerabilità a livello di memoria...

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

Poc per CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- Uso: 1-premi il pulsante share e fai uno screenshot 2-con ftp vai al percorso:/user/avcontents/photo/NPXS20001/NPXS20001/XXX/ troverai lo screenshot che hai fatto. 3-copialo sul pc ed eseguilo con makepng.py, produrrà poc.png...

CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32-

CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32- Utilizzo Listener di reverse shell con Ncat root@Kali:/TryHackme/Ice nc -nlvp 443 listening on any 443 ... connect to 192.168.92.128 from UNKNOWN 192.168.92.133 49211 Microsoft Windows Version 6.1.7601 Copyright c 2009...

CVE-2003-0264

CVE-2003-0264 Exploit per il buffer overflow in SLmail 5.5 CVE-2003-0264 Basato su: https://github.com/Gallopsled/pwntools https://github.com/rapid7/metasploit-framework Esempio di output: $ ./slmail-into-shell.py + Opening connection to 192.168.15.100 on port 110: Done + Trying to bind to 0.0.0....

CVE-2013-3664_MAC

Sketchup MAC Pict Material Palette Stack Corruption - CVE-2013-3664 SketchUp non convalida l'input durante l'analisi di una texture MACPict incorporata. È dimostrato che l'esecuzione di codice arbitrario è possibile quando una texture, una miniatura o un'immagine di sfondo dannosa innesca un...

EUVD-2026-87856

vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary...

CVE-2022-38601

Descrizione suggerita È stato scoperto che Lotsia Soft Lotsia PDM PLUS v5.80.220414 contiene un buffer overflow. Tipo di vulnerabilità Buffer Overflow Fornitore del prodotto Lotsia Soft Code base del prodotto interessato Lotsia PDM PLUS - 5.80.220414 Tipo di attacco Locale Impatto Esecuzione di...

NPM: vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

NPM: vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.6...

EUVD-2026-81596

vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool...

vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

Summary Sandboxed code is able to disclose host memory used by small allocations by Buffer.from, Buffer.concat. Details vm2 exposes Buffer object to sandboxed code by default. Small Buffer allocations for example, Buffer.allocUnsafe, Buffer.fromarray, Buffer.fromstring, and Buffer.concat use the...

GHSA-FCQC-726X-5WFC vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

Summary Sandboxed code is able to disclose host memory used by small allocations by Buffer.from, Buffer.concat. Details vm2 exposes Buffer object to sandboxed code by default. Small Buffer allocations for example, Buffer.allocUnsafe, Buffer.fromarray, Buffer.fromstring, and Buffer.concat use the...

CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...

CVE-2026-0461

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...

spookyssl-pcaps

PCAP SpookySSL e Copertura di Rete PCAP o non è successo A seguito della vulnerabilità recentemente divulgata in OpenSSL v3.0 fino alla v3.0.6 CVE-2022-3602, abbiamo esaminato come appare un tentativo di sfruttamento 'sulla rete'. Questo repository contiene PCAP di vari scenari di sfruttamento,...

CVE-2026-0461

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...

CVE-2026-0461

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...