Linux Distros Unpatched Vulnerability : CVE-2026-110597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory that allows attackers to read beyond buffers due to ...

Linux Distros Unpatched Vulnerability : CVE-2026-111275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nifticlib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifticonvertn2hdr2nim because the NIfTI-2 dim0 value is never...

SUSE SLES12: libsoup-2_4-1 / libsoup-2_4-1-32bit / libsoup-devel / libsoup-lang / etc (SUSE-SU-2026:4690-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4690-1 advisory. - CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame bsc1271401. - CVE-2026-12547: Header...

CVE-2024-28995

Exploit For CVE-2024-28995 On June 5, 2024, SolarWinds published an advisory for CVE-2024-28995, a high-severity directory traversal vulnerability affecting their file transfer solution Serv-U. The vulnerability was discovered by researcher Hussein Daher of Web Immunify. Using exploit python3...

CVE-2026-85706

CVE-2026-85706: GitLab CE/EE Unauthenticated Path Traversal CVE : CVE-2026-85706, CVSS 3.1 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Component : GitLab CE/EE Repository Commits API Workhorse body-upload variant Affected : 18.7 ≤ version 19.1.8, 19.2.0–19.2.5, 19.3.0–19.3.1 Fixed : 19.1.8 / 19.2.6 ...

CVE-2019-17662

CVE-2019-17662 Python implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit Based on the original EDB PoC by Nikhith Tumamlapalli EDB ID: 47519 Original PoC exploit does not work due to path normalisation in the Python Requests library. The code in...

CVE-2018-20463

CVE-2018-20463 There is a security vulnerability in WordPress JSmol2WP Plugin version 1.07. Attackers can exploit this vulnerability to read arbitrary files. Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file...

CVE-2026-110758

Text::CSVXS versions before 1.65 for Perl read before the start of an all-blank field under allowwhitespace in striptrailwhitespace. Under allowwhitespace, striptrailwhitespace removes trailing spaces and tabs from each unquoted field without stopping at the start of the field. For a field of onl...

CVE-2026-86227

A flaw was found in Valkey. An out-of-bounds read vulnerability exists in the kvstoreGetHashtable function within src/kvstore.c. This issue can be exploited by a remote attacker in cluster mode by providing a specially crafted dump.rdb file during application startup, for example, through data...

CVE-2026-67407

A flaw was found in rabbitmq-server. Due to improper regular expression character escaping, topic permission templates for Message Queuing Telemetry Transport MQTT clients fail to sanitize hyphen characters. An authenticated, low-privileged attacker controlling their client identifier can exploit...

CVE-2025-53964

CVE-2025-53964 Risk assessment CVSS v3: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - 9.6/10 Description GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...

[slackware-security] libXrender

New libXrender packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libXrender-0.9.13-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: Out-of-bounds read in libXrender's...

[slackware-security] libXi

New libXi packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libXi-1.8.4-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Out-of-bounds read in libXi's XQueryDeviceState...

Check-Point_poc

Check-Pointpoc Check-Point Security Gateway Arbitrary File Read Vulnerability CVE-2024-24919 python Check-Pointpoc.py -h -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--'...

CVE-2026-110758

Text::CSVXS versions before 1.65 for Perl read before the start of an all-blank field under allowwhitespace in striptrailwhitespace. Under allowwhitespace, striptrailwhitespace removes trailing spaces and tabs from each unquoted field without stopping at the start of the field. For a field of onl...

CVE-2026-110606

A flaw was found in libdxfrw. An out-of-bounds read vulnerability occurs when parsing drawing DWG files due to improper handling of non-null-terminated buffers in the file header reader. By convincing a user to open a specially crafted DWG file, an attacker could trigger an application crash,...

CVE-2026-111275

A flaw was found in nifticlib. This vulnerability can result in a Denial of Service DoS or memory corruption when an application processes a specially crafted NIfTI-2 image file. Due to missing range validation on dimension header values, an attacker could supply a malicious file that triggers a...

CVE-2026-110716

A flaw was found in unshield. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing the application. By tricking a user or system into processing a specially crafted InstallShield cabinet file with manipulated header offsets or file counts, an attacker can trigger an...

CVE-2026-111130

A flaw was found in OpenSlide. By convincing a user or automated service to open a specially crafted MIRAX slide file, an attacker can trigger an out-of-bounds memory read in the format reader due to improper index validation. This vulnerability primarily results in an application crash, causing ...

CVE-2026-110597

A flaw was found in tinyexr. When processing multi-part image files, the library fails to properly track buffer boundaries during header parsing, leading to an out-of-bounds read. An attacker could exploit this vulnerability by convincing a user or system to open a specially crafted EXR file,...