gimp:2.8 security, bug fix, and enhancement update

An update is available for pygobject2, module.gimp, module.pygtk2, python2-pycairo, pygtk2, gimp, module.pygobject2, module.python2-pycairo. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2023-41993

CVE-2023-41993 Exploit PoC This repository contains a Proof of Concept PoC exploit for the CVE-2023-41993 vulnerability. This PoC demonstrates limited read/write primitives based on the PoC released by po6ix. Demo of this PoC can be found here. Please make an issue if you have any questions,...

SiYuan - SQL Execution

SiYuan = v3.7.2 contains a SQL injection caused by passing client-supplied SQL statements verbatim to the main read-write database handle in /api/search/searchEmbedBlock, letting attackers with publish RoleReader token or anonymous access read and modify content, exploit requires publish RoleRead...

Apache DolphinScheduler >= 3.1.0, < 3.2.2 Resource File Read And Write

File read and write vulnerability in Apache DolphinScheduler, authenticated users can illegally access additional resource files. This issue affects Apache DolphinScheduler from 3.1.0 before 3.2.2. id: CVE-2024-30188 info: name: Apache DolphinScheduler = 3.1.0, 3.2.2 Resource File Read And Write...

smbeagle

/ \ / // / / / // / / / / / ///\ / / / / / / / / / / / / / / // / / / / , / / / // // / / / / // // / // ,// ///||////,// ///, / PRESENTS // SMBeagle SMBeagle is a cross-platform SMB fileshare auditing tool that hunts out all files it can see in the network and reports if the file can be...

lxd allows Cross-guest volume hijack via DevLXD device patch

Summary A guest can mount another guest's custom storage volume over /dev/lxd and read or write its contents without owning it. The DevLXD storage API blocks access to volumes you don't own, but the instance device-update path that attaches a volume to a container without checks ownership. Any...

CVE-2026-81744

Incorrect Authorization in ContentPermissionServices in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding only a limited content-create permission to self-grant the OWNER role on arbitrary content by invoking the createContentRole service e.g. via...

CVE-2026-81744

Apache OFBiz versions 24.09 before 24.09.08 are vulnerable to an authorization bypass in the ContentPermissionServices component. A remote authenticated attacker with limited content-create permissions can invoke the createContentRole service (e.g., via createForumGroupRole) to self-grant the OWN...

EUVD-2026-117485

Incorrect Authorization in ContentPermissionServices in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding only a limited content-create permission to self-grant the OWNER role on arbitrary content by invoking the createContentRole service e.g. via...

Important: Red Hat Security Advisory: gimp:2.8 security, bug fix, and enhancement update

An update for the gimp:2.8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader (load_resource_1033)

A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash...

Important: gimp:2.8 security, bug fix, and enhancement update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: gimp: hea...

CVE-2026-121957 FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race

FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP servers to corrupt client memory by racing the RDPGFX ResetGraphics handler against the planar bitmap decoder. Attackers can send ResetGraphics while concurrently sending compressed bitmaps of 32 bpp or more t...

CVE-2026-121957

FreeRDP before version 3.32.2 is vulnerable to a use-after-free condition caused by a race condition in the RDPGFX ResetGraphics handler. A malicious RDP server can trigger this by concurrently sending ResetGraphics commands and compressed bitmaps of 32 bpp or more , leading to heap use-after-fre...

CVE-2026-102704 arbitrary read/write via grant copy

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches...

CVE-2026-102704 arbitrary read/write via grant copy

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches...

CVE-2026-102704

The Xen hypervisor contains a vulnerability where a malicious guest VM can read and write the memory of other VMs, including dom0 . The root cause lies in the grant copy operation; for performance, Xen caches validated data, but a misplaced check incorrectly allowed copying by frame number outsid...

CVE-2026-102703 arbitrary read/write via grant copy

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches...

CVE-2026-102703

A flaw exists in the Xen hypervisor involving Grant Copy operations used for memory sharing between virtual machines. Due to performance optimizations, Xen caches internal validation data; however, it fails to properly re-validate this data when frame numbers and grant references are intermixed. ...

CVE-2026-87039

The user-mode syscall verifier zvrfyi2sconfigure in drivers/i2s/i2shandlers.c copies the caller's struct i2sconfig in from user memory and then, when cfg-frameclkfreq is 0 the API's "unconfigure the stream" request, jumps straight to zimpli2sconfigure without performing the...