CLEANSTART-2024-IP30957 GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability

Security vulnerability affects the gimp package. GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability...

CLEANSTART-2024-GC14102 GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Security vulnerability affects the gimp package. GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability...

CLEANSTART-2024-HD72386 GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Security vulnerability affects the gimp package. GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability...

cve-2026-19900-PoC

CVE-2026-19900 LB-LINK X-PRO Authentication Bypass and RCE via null user CVE-2026-19900 Hardcored Credential and Authentication Bypass RCE via null user. Bypass via Header: Cookie:user=null Usage Build and run the script with a target host: go build cve-2026-19900-PoC.go ./cve-2026-19900-PoC -t...

AZL-112354 CVE-2026-84243 affecting package glibc 2.38-21

The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid ATSECURE. An attacker who can set LANGUAGE in the environment of a program that uses gettext c...

CVE-2026-84243

The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid ATSECURE. An attacker who can set LANGUAGE in the environment of a program that uses gettext c...

DEBIAN-CVE-2026-84243

The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid ATSECURE. An attacker who can set LANGUAGE in the environment of a program that uses gettext c...

CVE-2026-76012

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the legacyrender function. This is due to broken authorization on the Lightroom galleryedit endpoint combined with mass...

CVE-2026-84243

The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid ATSECURE. An attacker who can set LANGUAGE in the environment of a program that uses gettext c...

CLEANSTART-2025-SK82750 Visual Studio Remote Code Execution Vulnerability

CVE-2023-36796 affects multiple packages. Visual Studio Remote Code Execution Vulnerability See references for individual vulnerability details...

CLEANSTART-2025-JG63575 Visual Studio Remote Code Execution Vulnerability

CVE-2023-36794 affects multiple packages. Visual Studio Remote Code Execution Vulnerability See references for individual vulnerability details...

CLEANSTART-2025-MK28879 Visual Studio Remote Code Execution Vulnerability

CVE-2023-36793 affects multiple packages. Visual Studio Remote Code Execution Vulnerability See references for individual vulnerability details...

CLEANSTART-2025-FK11078 Visual Studio Remote Code Execution Vulnerability

CVE-2023-36792 affects multiple packages. Visual Studio Remote Code Execution Vulnerability See references for individual vulnerability details...

CVE-2026-119777

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to...

DEBIAN-CVE-2026-119777

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to...

CVE-2026-115346

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 7.16.2 via the convertpaletteimagestotruecolor function. This is due to insufficient file type validation before processing uploaded files. This mak...

CVE-2026-104739

The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the setSupportCustomImage function in all versions up to, and including, 5.0.1. This makes it possible for authenticated attackers, wi...

CLEANSTART-2025-PO63043 FFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow vulnerability in asf_o format demuxer that can result in heap-buffer-overflow that may result in remote code...

Security vulnerability affects the ffmpeg package. FFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow vulnerability in asfo format demuxer that can result in heap-buffer-overflow that may result in remote code execution...

CVE-2026-119777

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to...

CLEANSTART-2025-BO43006 Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running ps...

Security vulnerability affects the postgresql15 package. Improper neutralization of newlines in pgdump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-comman...