JLSEC-2026-813 Crafted HTJ2K compressed EXR files can trigger out of bounds reads in OpenEXR

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.11, the HTJ2K High-Throughput JPEG 2000 decoder, htundoimpl in OpenEXRCore is vulnerable to a heap-buffer-overflow READ. The htundoimp...

Exploit for CVE-2026-8181

EN: Controlled PoC and brief technical notes for authorized secu...

DEBIAN-CVE-2026-34543

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, sensitive information from heap memory may be leaked through the decoded pixel data information disclosure...

CVE-2025-58795

CVE-2025-58795 describes a missing authorization vulnerability in the WordPress plugin Payoneer Checkout (versions n/a through 3.4.0) that allows content spoofing. The issue arises from lack of proper authorization checks, enabling an attacker to spoof content via this plugin’s checkout flow. Pub...

WordPress plugin Conditional Shipping for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...