CVE-2025-66628

CVE-2025-66628: Overflow di intero nel parser TIM di ImageMagick...

qq-tim-elevation

Elevazione dei privilegi locali di Tencent QQ/TIM Prodotti interessati: QQ 9.7.1.28940 9.7.8.29039 TIM 3.4.5.22071 3.4.7.22084 Componenti interessati: QQProtect.exe 4.5.0.9424 in TIM 3.4.5.22071 QQProtect.exe 4.5.0.9426 in QQ 9.7.1.28940 QQProtectEngine.dll 4.5.0.9424 in TIM 3.4.5.22071...

CVE-2023-34312-exp

Dichiarazione Questo progetto è stato creato esclusivamente per esperimenti di riproduzione Versioni interessate QQ 9.6.2.27855 9.7.11.29088 eccetto QQ 9.7.10, perché sembra non includere QQProtect.exe TIM 3.4.5.22071 3.4.7.22084 Utilizzo Dopo aver installato QQ/TIM, posiziona le due DLL dannose...

jwt_tool

The JSON Web Token Toolkit v2 jwttool.py is a toolkit for validating, forging, scanning and tampering JWTs JSON Web Tokens. Its functionality includes: Checking the validity of a token Testing for known exploits: CVE-2015-2951 The alg=none signature-bypass vulnerability CVE-2016-10555 The RS/HS25...

CVE-2026-39915

TIM Flow before 26.0.6 contains a CRLF injection vulnerability that allows remote attackers to inject arbitrary HTTP headers and response body content by embedding unsanitized carriage return and line feed sequences in the rt URL parameter, which is reflected into Set-Cookie response headers...

CVE-2026-39914

TIM Flow before 26.0.6 contains an improper authorization flaw in a privileged dashboard Excel export endpoint intended for administrative use only. Any authenticated user can submit arbitrary SQL queries to that endpoint, retrieving sensitive database contents as a downloadable spreadsheet and b...

EUVD-2026-64895

TIM Flow before 26.0.6 contains an improper authorization vulnerability that allows any authenticated user to submit arbitrary SQL queries to a privileged dashboard Excel export endpoint intended for administrative use only. Attackers can craft and submit unauthorized SQL queries to the export...

CVE-2026-39915 TIM Flow < 26.0.6 CRLF Injection via rt Parameter

TIM Flow before 26.0.6 contains a CRLF injection vulnerability that allows remote attackers to inject arbitrary HTTP headers and response body content by embedding unsanitized carriage return and line feed sequences in the rt URL parameter, which is reflected into Set-Cookie response headers...

EUVD-2026-64892

TIM Flow before 26.0.6 contains a CRLF injection vulnerability that allows remote attackers to inject arbitrary HTTP headers and response body content by embedding unsanitized carriage return and line feed sequences in the rt URL parameter, which is reflected into Set-Cookie response headers...

CVE-2026-39915

TIM Flow before 26.0.6 is affected by a CRLF injection vulnerability in the rt URL parameter (and access token cookie), where unsanitized carriage return and line feed sequences are reflected into Set-Cookie response headers. Remote attackers can inject arbitrary HTTP headers and response body co...

CVE-2026-74336

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. An out-of-bounds read vulnerability exists when parsing the S1G Sub-1 GHz TIM Traffic Indication Map Partial Virtual Bitmap PVB element. Due to an incorrect boundary check, the system can read two bytes beyond the allocated memory f...

Linux Distros Unpatched Vulnerability : CVE-2026-74336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: bound S1G TIM PVB walk to the TIM element ieee80211s1gchecktim parses the S1G Partial Virtual Bitmap PVB of a received TIM element. The TIM is...

CVE-2026-74336

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bound S1G TIM PVB walk to the TIM element ieee80211s1gchecktim parses the S1G Partial Virtual Bitmap PVB of a received TIM element. The TIM is handed in as the element payload: ieee80211parseelemsfull stores...

UBUNTU-CVE-2026-74336

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bound S1G TIM PVB walk to the TIM element ieee80211s1gchecktim parses the S1G Partial Virtual Bitmap PVB of a received TIM element. The TIM is handed in as the element payload: ieee80211parseelemsfull stores...

CVE-2026-74336

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bound S1G TIM PVB walk to the TIM element ieee80211s1gchecktim parses the S1G Partial Virtual Bitmap PVB of a received TIM element. The TIM is handed in as the element payload: ieee80211parseelemsfull stores...

CVE-2026-74336 wifi: mac80211: bound S1G TIM PVB walk to the TIM element

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bound S1G TIM PVB walk to the TIM element ieee80211s1gchecktim parses the S1G Partial Virtual Bitmap PVB of a received TIM element. The TIM is handed in as the element payload: ieee80211parseelemsfull stores...

EUVD-2026-59483

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bound S1G TIM PVB walk to the TIM element ieee80211s1gchecktim parses the S1G Partial Virtual Bitmap PVB of a received TIM element. The TIM is handed in as the element payload: ieee80211parseelemsfull stores...

CVE-2026-74336

CVE-2026-74336 concerns the Linux kernel’s wifi/mac80211 code. The vulnerability arises in ieee80211_s1g_check_tim() when parsing the S1G TIM PVB, where the end boundary used for walking encoded blocks was incorrectly computed as tim_len + 2, allowing a read past the TIM element into adjacent dat...

CVE-2026-74336 wifi: mac80211: bound S1G TIM PVB walk to the TIM element

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bound S1G TIM PVB walk to the TIM element ieee80211s1gchecktim parses the S1G Partial Virtual Bitmap PVB of a received TIM element. The TIM is handed in as the element payload: ieee80211parseelemsfull stores...

PT-2026-72772

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bound S1G TIM PVB walk to the TIM element ieee80211 s1g check tim parses the S1G Partial Virtual Bitmap PVB of a received TIM element. The TIM is handed in as the element payload: ieee802 11 parse elems full store...