CVE-2021-21985_PoC

CVE-2021-21985 漏洞代码 可用的CLASS/METHOD，用于PoC的简单示例：com.vmware.vsan.client.services.capability.VsanCapabilityProvider root@kitploit: ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported getIsEncryptionSupported getIsLocalDataProtectionSupportedOnVc...

CVE-2024-25291

DeskFiler RCE Ein Proof-of-Concept für die Schwachstelle CVE-2024-25291. deskfiler - 1.2.3 ermöglicht eine Electron-Webview in der Anwendung, mit daraus resultierendem Remote-Code In diesem Repository befinden sich eine beispielhafte verwundbare Anwendung und ein Proof-of-Concept-Exploit POC dafü...

ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as...

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

UBUNTU-CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

CVE-2026-42169 Gimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c)

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

EUVD-2026-52573

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

CVE-2026-42169

CVE-2026-42169 affects GIMP and its DDS plug-in. The APNG loader has a heap-buffer-overflow when fcTL width exceeds IHDR width, causing writes past heap bounds. A second heap-based overflow in the DDS plug-in arises from a BPP mismatch in load_layer(). Both issues are triggered by opening a speci...

CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

Linux Distros Unpatched Vulnerability : CVE-2026-42169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading t...

Build Numbers and Versions of Veeam Plug-in for Xen

This KB article lists all versions of the Veeam Plug-in for Xen and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-in for Xen 1 Releases Veeam Plug-in for Xen 1.0 Included with Veeam Backup & Replication 13.1 | 13.1.0.295 | 2026-07-29...

Build Numbers and Versions of Veeam Plug-in for Sangfor aSV

This KB article lists all versions of the Veeam Plug-in for Sangfor aSV and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-in for Sangfor aSV 1 Releases Veeam Plug-in for Sangfor aSV 1.0 Included withVeeam Backup & Replication 13.1 |...

Build Numbers and Versions of Veeam Plug-in for Verge OS

This KB article lists all versions of the Veeam Plug-in for Verge OS and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-in for Verge OS 1 Releases Veeam Plug-in for Verge OS 1.0 Included with Veeam Backup & Replication 13.1 | 13.1.0.1...

Build Numbers and Versions of Veeam Plug-in for Platform9

This KB article lists all versions of the Veeam Plug-in for Platform9 and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-in for Platform9 1 Releases Veeam Plug-in for Platform9 1.0 Included with Veeam Backup & Replication 13.1 |...

Oracle HTTP Server (July 2026 CPU)

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party W...

EUVD-2026-46778

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party Web Servers. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker...