CVE-2008-4654

CVE-2008-4654 Un exploit completamente funzionante per la vulnerabilità di buffer overflow basato su stack CVE-2008-4654 nel VLC Media Player 0.9.4 di VideoLan durante l'elaborazione dei file TiVo. Prende di mira un binario a 32 bit in esecuzione su un sistema Windows a 64 bit e utilizza un...

CVE-2025-69212

CVE-2025-69212: OpenSTAManager presenta un'iniezione di comandi del sistema operativo nell'elaborazione dei file P7M Panoramica...

CVE-2024-38077-check

Análise de vulnerabilidade de arquivos PDF assíncronos. Tenho habilidades limitadas e ainda não consigo fazer RCE. Por favor, especialistas, orientem-me. Para validar a vulnerabilidade, basta alterar o IP. root@kitploit: if name == 'main': printlogo connecttolicenseserver"192.168.6.132"...

CVE-2023-2255

CVE-2023-2255 CVE-2023-2255 RCE e caricamento di risorse esterne scoperto da @Icare1337 https://nvd.nist.gov/vuln/detail/CVE-2023-2255 Exploit Solo un esempio per rilasciare una webshell nella directory corrente. root@kitploit: python3 CVE-2023-2255.py --cmd 'wget...

Nemesis

Übersicht Nemesis ist eine quelloffene, zentralisierte Datenverarbeitungsplattform, die während Offensivsicherheitsbewertungen gesammelte Dateien aufnimmt, anreichert und eine kollaborative Analyse mit Menschen und KI ermöglicht. Nemesis 2.0 basiert auf Docker mit starker Dapr-Integration. Unser...

CVE-2026-68515

OpenEXR is the reference implementation for the EXR image format used in the motion picture industry. A heap out-of-bounds write exists in the exrmultiview utility when combining two attacker-supplied, individually valid scanline EXR files whose union dataWindow is not aligned to one view's chann...

CVE-2021-22204

Versione vulnerabile 7.44 12.23 Riproduzione root@kitploit: $ bash craftadjvuexploit.sh 'cal' $ ./exiftool delicate.jpg Screenshot Riferimento NVD-CVE-2021-22204...

Weaver OA 9.5 - Information Disclosure

A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2config.ini. The manipulation leads to files or directories accessible. The attack may be initiated remotely. id:...

CVE-2025-43300

📚 CVE-2025-43300 - Detaillierte Analyse der Sicherheitslücke 🎯 Zusammenfassung CVE-2025-43300 ist eine Pufferüberlauf -Sicherheitslücke bei der Verarbeitung von DNG-Dateien Digital Negative, die aufgrund einer Inkonsistenz zwischen TIFF-Metadaten und JPEG-Daten auftritt und eine...

CVE-2025-69212-PoC

CVE-2025-69212 OpenSTAManager = 2.9.8 — Iniezione di Comandi OS nell'Elaborazione di File P7M Panoramica...

CVE-2026-20679

CVE-2026-20679 is a vulnerability in the CoreUI framework on macOS. Processing a maliciously crafted file may lead to unexpected app termination (denial of service). The root cause is not further specified beyond "improved checks" being applied as the fix. The issue was reported by Mustafa Calap ...

PT-2026-79271

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination...

CVE-2026-19026

A flaw was found in HDF5. A remote attacker could craft a malicious HDF5 file that, when opened and read, would cause an application using the HDF5 library to crash. This issue stems from improper validation of input data within the N-Bit filter, leading to a denial of service DoS and impacting t...

ImageMagick < 6.9.13-52 / 7.x < 7.1.2-27 Heap Buffer Over-write (CVE-2026-62946)

The remote host has a version of ImageMagick installed that is prior to 6.9.13-52 or 7.x prior to 7.1.2-27. It is, therefore, affected by a heap buffer over-write vulnerability: - Processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, leading to a heap buffer...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

CVE-2026-59088 Gimp: gimp: denial of service via signed integer overflow in fli file processing

A flaw was found in GIMP. A signed integer overflow vulnerability exists in the file-fli plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width and height can exceed the maximum intege...

java-25-openjdk security update

An update is available for java-25-openjdk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environme...

RLSA-2026:42899 Important: java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fixes: JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance XBM...

UBUNTU-CVE-2026-66758

A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both values to large values, their product exceeds 2^31 and overflows, resulting in an...

CVE-2026-66757

A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table. The image header dimensions ysize and zsize are read as 16-bit unsigned integers. If a crafted file sets both dimensions to their maximum value 65535, the...