PT-2026-107192

Name of the Vulnerable Software and Affected Versions HPE Networking ClearPass Policy Manager affected versions not specified Description A format string flaw in a service interface allows an unauthenticated remote attacker to corrupt process memory. This condition could lead to the execution of...

AlmaLinux 9.2 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs (ALMALINUX9.2:CLSA-2026:1791295129)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791295129 advisory. - A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the readlayerblock function when processing a speciall...

The vulnerability of the unci decoder and file format encoder component of libheif allows a hacker to execute arbitrary code.

The vulnerability of the unci decoder and file format encoder component of libheif relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2026-105747

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/metsgbsbackend.py call tarfile.TarFile.getmembers...

CVE-2026-105747 Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/metsgbsbackend.py call tarfile.TarFile.getmembers...

CVE-2022-0778

CVE-2022-0778 설명 우리는 drago-96의 개념을 참고하여 P12 및 PEM 형식을 기반으로 PoC를 재작성했습니다. 이를 사용하여 CVE-2022-0778 취약점, 즉 위험한 SSL 인증서개인 비밀번호 없이 비워둠를 확인할 수 있습니다. 영향을 받는 장치의 경우 프로세스의 CPU가 100%가 되거나 재부팅될 수 있습니다. 크레딧 https://github.com/drago-96/CVE-2022-0778 https://twitter.com/taviso...

CVE-2026-102295

A cross-site scripting (XSS) vulnerability exists in Quay within the OAuth callback handler (specifically via the oauth local callback format=json parameter). The root cause is improper input sanitization , which allows a remote attacker to execute arbitrary JavaScript in a user's browser by tric...

CVE-2026-102295 Quay: quay: dom-based cross-site scripting via oauth local callback format=json parameter

A flaw was found in Quay. A cross-site scripting XSS vulnerability in the OAuth callback handler allows a remote attacker to execute arbitrary JavaScript code within a user's browser session. By tricking a logged-in user into visiting a specially crafted link, an attacker can exploit improper inp...

CVE-2026-66916

JoomGallery의 JSON 형식을 통한 비밀번호 보호 카테고리 우회 JoomGallery ≤ 4.3.0-stable — 인증되지 않은 공격자가 비밀번호 게이트를 우회하여 보호된 이미지 다운로드 요약 JoomGallery의 카테고리 JSON 뷰에 인증되지 않은 접근 제어 우회가 존재합니다. 갤러리 카테고리가 비밀번호로 보호되어 있을 때 HTML 뷰는 비밀번호 게이트를 올바르게 적용하지만, JSON 뷰format=json는 이 검사를 완전히 건너뜁니다. 자격 증명이 없는 원격 공격자는 카테고리의 제목, 설명, 그리고 보호된 ...

Prineo_RE

About PriPara internal name Prineo is an arcade rythm game developed by SynSophia. Goal The goal of this project was to reverse the model format of the arcade series in order to port exclusive characters to the newer version of the game on Nintendo Switch. Screenshots Some interesting screenshots...

CVE-2024-23113

CVE-2024-23113 이 스크립트는 FortiGate FGFM 서비스FortiGate에서 FortiManager로의 프로토콜의 TCP 포트 541에서 실행되는 포맷 문자열 취약점인 CVE-2024-23113을 탐지하도록 설계되었습니다. 이 취약점은 공격자가 포맷 문자열을 제어할 수 있기 때문에 발생하며, 이는 원격 코드 실행RCE 또는 기타 의도하지 않은 동작으로 이어질 수 있습니다. FGFM 서비스는 구성 관리를 위해 FortiGate 장치와 FortiManager 간의 통신을 허용하며, 패치되지 않은 버전은 입력을...

CVE-2021-22204

CVE-2021-22204 Описание Неправильная нейтрализация пользовательских данных в формате файлов DjVu в ExifTool версий 7.44 и выше позволяет выполнять произвольный код при разборе вредоносного изображения. Скрипт Ссылка на скрипт Использование скрипта: Системная команда: bash CVE-2021-2204.sh...

Astra Linux – Vulnerability in hdf5

There is an out-of-bounds read vulnerability in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially crafted GIF file can lead to code execution. An attacker can provide a malicious file to exploit this vulnerability...

Astra Linux – Vulnerability in binutils

The bfdgenericreadminisymbols function in syms.c within the Binary File Descriptor BFD library also known as libbfd, as part of GNU Binutils 2.31, contains a memory leak that can occur due to an improperly crafted ELF file. This leads to a denial of service condition due to excessive memory...

Astra Linux – Vulnerability in freerdp3, freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.22.0, audinserverrecvformats freed an incorrect number of audio formats upon parse failure i + i, resulting in out-of-bounds access in audioformatsfree. This vulnerability has been fixed in version 3.22.0...

Astra Linux – Vulnerability in hdf5

A issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5Fgetnrefs located in H5Fquery.c. This allows an attacker to cause a Denial of Service attack...

Astra Linux – Vulnerability in liblivemedia

Live555 version 1.08 does not handle Matroska and Ogg files properly. Sending two consecutive RTSP SETUP commands for the same track causes a Use-After-Free error and results in a crash of the daemon...

Astra Linux – Vulnerability in Git

Git is a distributed revision control system. git log can display commits in an arbitrary format using its --format specifiers. This functionality is also exposed to git archive via the export-subst gitattribute. When processing the padding operators, there is an integer overflow in...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: cleanup of FB if dpuformatpopulatelayout fails If dpuformatpopulatelayout fails, then FB is prepared, but not cleaned up. This results in the pincount being leaked from the GEM object, causing a crash during DRM file...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: powerpc/secvar: A refcount leak has been fixed in formatshow. A refcount leak occurs when formatshow returns an error in multiple cases. Unified management of ofnodeput can fix this issue...