CVE-2026-36834

Zusammenfassung Ein aus dem Gültigkeitsbereich laufender Array-Zugriff Out-of-Bounds Read existiert in src/decoders/pana8.cpp. Die Funktion GetDBit kann den Wert 17 zurückgeben, wenn keine Huffman-Tabellenübereinstimmung gefunden wird, aber huffcoeff ist nur mit 17 Elementen deklariert gültige...

CVE-2026-41707

Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerability. The internal cache storing JWT ID claims has a strict size limit, allowing attackers to evict legitimate entries ...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - डरावना लगता है। अब भी Stagefright और PNG bugs वल्न्स याद हैं .... CVE-2019-2107 के साथ डिकोडर/कोडेक mediacodec यूज़र के तहत चलता है और उचित रूप से "क्राफ्टेड" वीडियो टाइल्स सक्षम के साथ - pspps-i1tilesenabledflag के साथ आप संभवतः RCE कर सकते हैं। प्रभाव...

CVE-2026-65979

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.12, the HTJ2K decoder parses a header-length field PLEN from a chunk's compressed data but never checks that this value fits within the...

CVE-2026-65979

OpenEXR (the reference implementation for the EXR image format, widely used in the motion picture industry) versions 3.4.0 through 3.4.12 contain an out-of-bounds read in the HTJ2K decoder . The decoder parses a header-length field (PLEN ) from a chunk's compressed data and advances the codestrea...

CVE-2026-65979

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.12, the HTJ2K decoder parses a header-length field PLEN from a chunk's compressed data but never checks that this value fits within the...

CVE-2026-65979 OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN)

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.12, the HTJ2K decoder parses a header-length field PLEN from a chunk's compressed data but never checks that this value fits within the...

decoder-plus-plus

Decoder++ Decoder++ ist eine erweiterbare Anwendung, die für Penetrationstester, Softwareentwickler und alle dazwischen konzipiert ist, die mühelos Daten in verschiedenen Formaten decodieren und codieren möchten. Sie enthält eine breite Palette vorinstallierter Skripte und Codecs, intelligente...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

msmap

MSMAP Msmap è un generatore di WebShell in memoria. Compatibile con vari Container, Componenti, Encoder, WebShell / Proxy / Killer e Client di Gestione. 简体中文 L'idea alla base I, L'idea alla base II, L'idea alla base III Funzionalità WIP Funzioni Menu Dinamico Compilazione Automatica Generazione...

CVE-2026-12600 Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder

Denial-of-service DoS vulnerability in the internal JPEG2000 JPX decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an untrusted PDF file containing specially crafted JPXDecode images, a remote attacker can cause uncontrolled memory consumption...

CVE-2026-12600

CVE-2026-12600 is a denial-of-service vulnerability in the JPEG2000 (JPX) decoder within a Poppler fork maintained by Innodata Labs . The flaw resides in JPXStream::readCodestream(), where attacker-controlled values from the SIZ segment (e.g., img.nComps) are used to allocate memory for tiles and...

pyrmax

pyrmax Decoder und Encoder für Ubiquiti-AirMAX-Wire-Protokoll-Frames, die sowohl die AC-Serie WA-Firmware als auch die M-Serie XW/XM-Firmware abdecken. Dekodierung der Klartext-äußeren Header erfolgt über Kaitai Struct-Schemata unter ksy/. Die AC-Nutzlast versionsabhängig, umgeschaltet über...

wiremax

wiremax Un dissector Wireshark/tshark per gli Information Element vendor Ubiquiti AirMAX AC + M e il compagno Mikrotik / RouterBoard , scritto in Lua. È la controparte over-the-wire di pyrmax: la logica di decodifica rispecchia quel pacchetto Python campo-per-campo. Il formato dei pacchetti AC è...

CVE-2026-11105-Stack-Buffer-Overflow-in-Custom-Base64-Decoder

CVE-2026-11105 – Estouro de Buffer na Pilha no Decodificador Base64 Personalizado Código do Programa C root@kitploit: // base64vuln.c - Vulnerable Base64 decoder include include include int base64decodeconst char in, sizet inlen, char out, sizet outlen static const char table =...

web3-decoder

Web3 Decoder Web3 Decoder è un'estensione per Burp Suite che aiuta ad analizzare cosa succede con le operazioni che coinvolgono smart contract del web3. Si tratta principalmente di chiamate JSON-RPC a nodi Ethereum e nodi di altre reti compatibili come Polygon, Arbitrum, BSC... Download e...

cve-2026-49975-http2bomb_reproduction

CVE-2026-49975 HTTP/2 Bomb Complete Reproduction Guide Based on QiAnXin CERT Advisory + Calif Original Research ================================================================ I. Vulnerability Overview CVE-2026-49975 is a critical denial-of-service DoS vulnerability in HTTP/2 server and proxy...

flask-session-cookie-manager

Decodificatore/Codificatore di Cookie di Sessione Flask Autore originale : Wilson Sumanang Autore delle correzioni e migliorie : Alexandre ZANNI Importato da saruberoz.github.io Dipendenze Python 2 o Python 3 itsdangerous Flask Installazione Pacchetto BlackArch Linux root@kitploit: pacman -S...

PT-2026-81899

Name of the Vulnerable Software and Affected Versions Spring Security version 7.1.0 Spring Security versions 7.0.0 through 7.0.6 Spring Security versions 6.5.0 through 6.5.11 Description An authentication bypass issue exists in the DPoPProofJwtDecoderFactory due to a cache-based replay attack. Th...

CVE-2026-68516

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.13, a crafted HTJ2K-compressed EXR can crash OpenEXR during normal decode. An HTJ2K-compressed EXR whose JPEG 2000 SIZ fields place the...