CVE-2026-25584 iccDEV vulnerable to Stack-based Buffer Overflow in CIccTagFloatNum::GetValues()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a stack-buffer-overflow vulnerability in CIccTagFloatNum::GetValues. This is triggered when processing a malformed ICC...

CVE-2026-25584

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a stack-buffer-overflow vulnerability in CIccTagFloatNum::GetValues. This is triggered when processing a malformed ICC...

CVE-2026-25583

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8 when processing malformed ICC profile files via unchecked fread...

EUVD-2026-5319

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8 when processing malformed ICC profile files via unchecked fread...

CVE-2025-60865

creationtimestamp| type| source ---|---|--- 2026-02-04 21:24:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2sr22hij2m...

CVE-2025-69620

creationtimestamp| type| source ---|---|--- 2026-02-04 21:24:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2sqqqx7o2v...

CVE-2025-63624

creationtimestamp| type| source ---|---|--- 2026-02-04 21:15:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2sachkv62h 2026-02-04 21:15:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2sba3niq2g...

CVE-2026-25157

creationtimestamp| type| source ---|---|--- 2026-02-04 20:22:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2pbo4ear23 2026-02-04 20:22:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2pcklw6b23 2026-02-09 19:30:05+00:00| seen|...

CVE-2026-24672

The Open eClass platform formerly known as GUnet eClass is a complete course management system. Prior to version 4.2, a Stored Cross-Site Scripting XSS vulnerability allows authenticated students to inject malicious JavaScript into user profile fields, which is executed when users with viewing...

CVE-2025-63372

creationtimestamp| type| source ---|---|--- 2026-02-04 19:06:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2kzltxva2h...

CVE-2025-64712

creationtimestamp| type| source ---|---|--- 2026-02-04 18:27:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2ivbdcni27 2026-02-09 00:04:32+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mef5kylgmc2m 2026-02-13 02:20:09+00:00| seen|...

CVE-2026-0538

creationtimestamp| type| source ---|---|--- 2026-02-04 17:17:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2exxudji22...

CVE-2025-61732

creationtimestamp| type| source ---|---|--- 2026-02-04 16:06:39+00:00| seen| https://bsky.app/profile/golang.org/post/3me2ayvl5ps2j 2026-02-05 02:28:35+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3me3dqytnll2i 2026-02-05 15:17:14+00:00| seen|...

CVE-2026-22247

creationtimestamp| type| source ---|---|--- 2026-02-04 14:50:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3me24q3czij23...

CVE-2026-22044

creationtimestamp| type| source ---|---|--- 2026-02-04 14:50:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3me24q3czij23...

CVE-2026-25160

creationtimestamp| type| source ---|---|--- 2026-02-04 11:05:07+00:00| published-proof-of-concept| https://github.com/AlistGo/alist/security/advisories/GHSA-8jmm-3xwx-w974 2026-02-04 20:22:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2pbvf6lr27 2026-02-04...

CVE-2025-15285

creationtimestamp| type| source ---|---|--- 2026-02-04 09:17:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdzk5ekgml25...

CVE-2025-15268

creationtimestamp| type| source ---|---|--- 2026-02-04 09:17:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdzk56b4x62g...

CVE-2025-627288

creationtimestamp| type| source ---|---|--- 2026-02-04 08:13:49+00:00| seen| https://bsky.app/profile/jasonelkin.uk/post/3mdzglfcd4k2j...

UNA CMS <= 14.0.0-RC4 - PHP Object Injection

The vulnerability is located in the /template/scripts/BxBaseMenuSetAclLevel.php script. Specifically, within the BxBaseMenuSetAclLevel::getCode method. When calling this method, user input passed through the "profileid" POST parameter is not properly sanitized before being used in a call to the...