exploit-CVE-2021-22204

Exploit per CVE-2021-22204 ExifTool - Esecuzione Arbitraria di Codice Ti piace questo repo? Dacci una ⭐! Solo per scopi educativi e di ricerca sulla sicurezza autorizzata. Autore dell'Exploit @UNICORDev di @NicPWNs e @Dev-Yeoj Descrizione della Vulnerabilità La mancata neutralizzazione dei dati...

Samsung-CVE-2025-21042

🔐 CVE-2025-21042 — Esecuzione di codice remoto nel codec immagini Samsung ⚙️ Cos'è Una vulnerabilità critica nella libreria di elaborazione immagini di Samsung libimagecodec.quram.so — utilizzata sui dispositivi Galaxy Android. 🧩 È un difetto di scrittura fuori dai limiti out-of-bounds write...

CVE-2021-22204

CVE-2021-22204 Beschreibung Die unzureichende Neutralisierung von Benutzerdaten im DjVu-Dateiformat in ExifTool Versionen 7.44 und höher ermöglicht die Ausführung beliebigen Codes beim Parsen der bösartigen Bilddatei. Skript Skript-Link Skriptnutzung: Systembefehl: root@kitploit: bash...

CVE-2021-22204

CVE-2021-22204 Resumo do CVE A sanitização inadequada dos dados do usuário no formato de arquivo DjVu no ExifTool versões 7.44 e superiores permite a execução arbitrária de código ao analisar a imagem maliciosa. Versões Afetadas Versão 7.44 - 12.23 Anomalias Dependências: djvulibre-bin exiftool...

adiskreader-secretsdump

🚩 Sponsor Se ti piace questo progetto, considera l'acquisto di licenze di OctoPwn, la nostra suite completa di pentesting che gira nel tuo browser! Per notifiche su nuove build/versioni e altre informazioni, unisciti al nostro Discord adiskreader-secretsdump Estrai i segreti del registro e NTDS d...

CVE-2022-44268-automated-poc

CVE-2022-44268 ImageMagick Lecture Arbitraire de Fichiers poc Entièrement Automatisé ⚙ Une vulnérabilité de divulgation d'informations qui pourrait être exploitée pour lire des fichiers arbitraires depuis un serveur lors de l'analyse d'une image. Version d'ImageMagick concernée root@kitploit:...

CVE-2026-78465

An integer overflow in the file-pcx plugin of GIMP affects 32-bit builds only . When a crafted PCX image file sets the number of color planes to 4 alongside sufficiently large dimensions, the memory allocation size calculation exceeds the 32-bit integer limit, producing an undersized heap buffer ...

CVE-2026-77118

A heap out-of-bounds write exists in the Photo CD PCD decoder of GraphicsMagick. In DecodeImage coders/pcd.c, the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is...

MINI-CV28-GHF4-WGHC

Bulletin has no description...

DEBIAN-CVE-2026-74552

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after devmhwmondeviceregisterwithinfo has been called. At that time, data-hwmondev is not y...

DEBIAN-CVE-2026-74407

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps with WLAN firmware crash recovery SSR. The crash is a NULL pointer dereference in the MHI teardown path while freeing DMA-backed...

DEBIAN-CVE-2026-74314

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpfobjfreefields when a value is being replaced or recycled. That makes field destruction depend on the context of the update/delete...

DEBIAN-CVE-2026-72491

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma-state in transrdma.c The rdma-state field is modified without holding reqlock in both recvdone and p9cmeventhandler, while rdmarequest accesses the same field under the reqlock spinlock. This...

DEBIAN-CVE-2026-72405

In the Linux kernel, the following vulnerability has been resolved: net: udptunnel: prevent double queueing in udptunnelnicdevicesync Yue Sun reported a use-after-free and debugobjects warning in udptunnelnicdevicesyncwork during concurrent device operations. The workqueue core clears the interna...

DEBIAN-CVE-2026-72266

In the Linux kernel, the following vulnerability has been resolved: fbdev: vesafb: fix memory leak in vesafbprobe Since commit 73ce73c30ba9 "fbdev: Transfer video= option strings to caller; clarify ownership" the string returned from fbgetoptions is expected to be freed by the caller. But the...

FreeBSD : OpenEXR -- 3.4.14 fixes multiple vulnerabilities (56449320-97c5-11f1-84d7-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 56449320-97c5-11f1-84d7-3c7c3fba4204 advisory. Cary Phillips reports: The OpenEXR 3.4.14 release addresses the following security...

Important: Red Hat Security Advisory: compat-libtiff3 security update

An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

Important: Red Hat Security Advisory: compat-libtiff3 security update

An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Exploit for Out-of-bounds Write in Apple Ipados

CVE-2026-28956 Donate Support the maintenance of this pro...

DEBIAN-CVE-2026-68224

In the Linux kernel, the following vulnerability has been resolved: media: mali-c55: Fix possible ERRPTR in enablestreams The mediapadremotepadunique function returns either a valid pointer or an ERRPTR on failure -ENOTUNIQ if multiple links are enabled, -ENOLINK if no connected pad is found. The...