CVE-2022-40363

CVE-2022-40363 Un overflow del buffer nel componente nfcdeviceloadmifareuldata di Flipper Devices Inc., Flipper Zero precedente alla v0.65.2, consente agli attaccanti di causare un Denial of Service DoS tramite un file NFC appositamente predisposto. autenticazione| complessità| vettore ---|---|--...

EUVD-2026-67721

A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...

CVE-2026-82324 Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0

A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...

CVE-2026-82324

CVE-2026-82324 affects the file-iff (IFF/ILBM) plugin in GIMP . When processing a specially crafted IFF/ILBM image file, the plugin fails to properly validate the HAM row size and mishandles cases where the number of color planes (nPlanes ) is zero. This causes a row size mismatch that bypasses m...

CVE-2026-82324

A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...

CVE-2018-16706

CVE-2018-16706 Oder wie ich meinen Fernseher ausschalte $ nmap 192.168.1.55 -p 9080 PORT STATE SERVICE 9080/tcp open glrpc Nmap done: 1 IP address 1 host up scanned in 0.05 seconds CVE-Details https://www.cvedetails.com/cve/CVE-2018-16706/...

CVE-2026-13761

Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs used for loop conditions , which can cause excessive looping and potentially lead to denial of service or other consequences. The vulnerability is exploitable over the network with low complexity and no p...

EUVD-2026-67718

Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping...

CVE-2026-13761 Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.

Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping...

intel471-threat-hunting-cve-2023-46604

Intel 471 थ्रेट हंटिंग वर्कशॉप – CVE-2023-46604 जांच अवलोकन यह रिपॉजिटरी Intel 471 के इंटेलिजेंस-ड्रिवन थ्रेट हंटिंग वर्कशॉप के साथ मेरे पहले व्यावहारिक अनुभव का दस्तावेजीकरण करती है, जो CVE-2023-46604 पर केंद्रित है। इस व्यावहारिक वर्कशॉप के माध्यम से, मैंने जांच की कि कैसे हमलावरों ने एक...

CVE-2022-0918

CVE-2022-0918 Pagina CVE di Red Hat: https://access.redhat.com/security/cve/cve-2022-0918 Issue GitHub con patch collegate: https://github.com/389ds/389-ds-base/issues/5242 PoC L'applicazione PoC accetta un singolo IP, sia IPv4 che IPv6 funzioneranno. Di default invia il messaggio alla porta 389;...

CVE-2020-0668

CVE-2020-0668 Implementazione in PowerShell che sfrutta printconfig.dll per l'elevazione dei privilegi Il evil dll può essere definito personalmente; la mia DLL esegue il file c:\programdata\setup.bat Riferimenti: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0668...

bigdecimal-segfault-fix

h1. BigDecimal Segfault Fix Es gibt einen Segfault-Fehler in Rubys BigDecimal-Bibliothek, der von Benutzern durch die Angabe bekanntermaßen ungültiger Werte ausgelöst werden kann. Wenn Sie testen möchten, ob Ihre Anwendung sicher ist, führen Sie +example.rb+ aus. Dieses Skript sollte normal beend...

CVE-2021-35492

Informazioni sull'exploit Titolo dell'exploit: Wowza Streaming Engine 4.8.11+5 - Negazione del servizio CVE: CVE-2021-35492 Data: 2021-10-06 Autore dell'exploit: N4nj0 Link del software: https://www.wowza.com/products/streaming-engine Versione: 4.8.11+5 Testato su: Wowza Streaming Engine = 4.8.11...

EUVD-2026-67717

CodeChecker's massStoreRun processing path performs one-shot decompression of attacker-controlled, Base64-encoded zlib data without enforcing a maximum decompressed size. An authenticated user with permission to store analysis runs can submit a highly compressed payload that expands to a...

CVE-2026-58107

CodeChecker (Ericsson) is affected by an authenticated remote denial of service in the massStoreRun processing path. The vulnerability arises from one-shot decompression of attacker-controlled, Base64-encoded zlib data without enforcing a maximum decompressed size. An authenticated user with perm...

CVE-2026-58107 Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun

CodeChecker's massStoreRun processing path performs one-shot decompression of attacker-controlled, Base64-encoded zlib data without enforcing a maximum decompressed size. An authenticated user with permission to store analysis runs can submit a highly compressed payload that expands to a...

CVE-2026-58107 Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun

CodeChecker's massStoreRun processing path performs one-shot decompression of attacker-controlled, Base64-encoded zlib data without enforcing a maximum decompressed size. An authenticated user with permission to store analysis runs can submit a highly compressed payload that expands to a...

CVE-2026-82261

SvelteKit @sveltejs/kit versions =2.49.0 and =2.52.1 with experimental remote functions and form enabled contain a CPU exhaustion vulnerability in form deserialization. An attacker can send malformed form data to cause the server to become unresponsive while processing the request, resulting in...

CVE-2026-82260

SvelteKit @sveltejs/kit versions =2.49.0 and =2.52.1 with experimental remote functions experimental.remoteFunctions and form enabled contain a memory exhaustion vulnerability in remote form deserialization. Malformed form data can cause excessive memory allocation, crashing the server process an...