CVE-2026-101130

The Affinity by Canva application (versions prior to 3.3.1 , October 2026 release) is vulnerable to a heap buffer over-read due to inadequate bounds checking when parsing arrays of strings in Affinity document files. Specifically, the flaw exists in Kernel::InSerialiser::LoadTypes involving a pro...

EUVD-2026-95752

The Affinity by Canva application before 3.3.1 October 2026 release did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in...

CVE-2026-101094

The Affinity by Canva application before 3.3.1 October 2026 release did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in...

CVE-2026-101094

The Affinity by Canva application, prior to version 3.3.1 (October 2026 release), contains an unbounded over-read vulnerability in Story::GlyphString::Add . The issue stems from the software's failure to correctly handle incomplete UTF-8 character sequences while parsing text within Affinity docu...

cve-2026-85706

cve-2026-85706 Unauthentifiziertes beliebiges lokales Dateilesen in GitLab CE/EE. Betrifft 18.7–19.1.7, 19.2.0–19.2.5, 19.3.0–19.3.1. Behoben in 19.1.8 / 19.2.6 / 19.3.2 2026-09-10. CVSS 10.0, Berichten zufolge in freier Wildbahn ausgenutzt. Ursprünglicher Bericht von s3ntago, und dieses Repo ist...

EUVD-2026-95750

The Affinity by Canva app for macOS before 3.3.1 October 2026 release did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document that, when displayed ...

CVE-2026-96395

The Affinity by Canva app for macOS before 3.3.1 October 2026 release did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document that, when displayed ...

CVE-2026-96395

The Affinity by Canva app for macOS (versions prior to 3.3.1 ) is vulnerable to a heap memory disclosure due to an unchecked palette index in the QuickLook extensions . This flaw occurs because the application fails to perform adequate bounds checking when generating QuickLook thumbnails and prev...

CVE-2026-96394

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an...

EUVD-2026-95749

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an...

CVE-2026-96394

The Affinity by Canva application for macOS versions prior to 3.3.1 (October 2026 release) is vulnerable to an out-of-bounds heap read (CWE-126). The root cause is a failure to validate image dimensions against the size of pixel data when generating QuickLook thumbnails and previews of Affinity d...

gitlab-12.9.0-file-read

L'avviso Solo per scopi dimostrativi e hacking etico. Il cosa Uno script che vorrebbe essere migliore di quello che si trova su exploit-db riguardo alla lettura arbitraria autenticata di file su GitLab v12.9.0 CVE-2020-10977 Il come 1. Soddisfa le dipendenze probabilmente hai già il resto pip3...

cve-2024-30350-research-notes

Note di ricerca su CVE-2024-30350 Panoramica CVE-2024-30350 è una vulnerabilità di divulgazione di informazioni da lettura fuori dai limiti out-of-bounds read in Foxit PDF Reader. Il problema è stato pubblicato da Trend Micro Zero Day Initiative come ZDI-24-333 e tracciato prima della divulgazion...

Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite...

Arbitrary File Access

Docling is vulnerable to arbitrary file read and write. The vulnerability is due to the Tectonic engine compiling untrusted TikZ input without restricting file access, which allows an attacker to read accessible files and create or overwrite writable files, with potential command execution if she...

Event-ID-263-Rule-Name-SOC287---Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

Questo repository non contiene un README...

wp2shell-compromise-scanner-plugin

Scanner di Compromissione per wp2shell sola lettura Un plugin WordPress autonomo, in sola lettura , che scansiona il tuo database e la directory dei plugin per rilevare segni che la catena core wp2shell CVE-2026-63030 + CVE-2026-60137 sia stata sfruttata — anche se è successo settimane fa o...

CVE-2025-27136-XXE-LocalS3

CVE-2025-27136 XXE-LocalS3 Prova di concetto per CVE-2025-27136 XXE in Local-S3 └─$ python3 exploit.py http://$ip:8080 /etc/passwd + S3 service detected + Creating bucket: xxe-32d14993 + Server response: ac3aaf20-e59a-4705-9505-3ebb01db7fc1 + Retrieving file via ?location + Response:...

CVE-2026-98238

A flaw was found in the Linux kernel's t7xx Wireless Wide Area Network WWAN driver. This vulnerability allows an attacker to cause a Denial of Service DoS by sending malformed network packets. The driver fails to validate the network interface index in incoming packet headers before indexing an...

GetFGPP

GetFGPP Estrae le Fine Grained Password Policies FGPP da Active Directory tramite LDAP. Richiede accesso in lettura al Password Settings Container — di default solo gli admin hanno questo diritto, ma a volte è configurato in modo errato. Installazione pip3 install ldap3 python-dateutil non più...