Exploit for CVE-2026-1296

CVE-2026-1296 — Frontend Post Submission Manager Lite Proof...

EUVD-2026-110833

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dxbytes, causing crashes or heap memory disclosure into the decod...

CVE-2026-117555 GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read via Integer Overflow in _load_bmp()

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dxbytes, causing crashes or heap memory disclosure into the decod...

CVE-2026-117555

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dxbytes, causing crashes or heap memory disclosure into the decod...

CVE-2026-117555 GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read via Integer Overflow in _load_bmp()

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dxbytes, causing crashes or heap memory disclosure into the decod...

CVE-2026-117555

The GreycLab CImg library, version through 4.0.6 , is vulnerable to a heap out-of-bounds read within the _load_bmp() function of CImg.h. The root cause is an integer overflow in the row byte count, which can be triggered by providing a crafted BMP file with a large header width that wraps dx_byte...

CVE-2026-117554

Admidio versions before 5.0.17 are vulnerable to an improper access control vulnerability in modules/events/events_function.php. Authenticated members can bypass guest restrictions by submitting the additional_guests field when guests are otherwise disallowed. This allows an attacker to set the v...

CVE-2026-117554 Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.php

Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additionalguests field when guests are disallowed. Attackers can set additionalguests to the remaining seat count in modules/events/eventsfunction.p...

CVE-2026-117554

Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additionalguests field when guests are disallowed. Attackers can set additionalguests to the remaining seat count in modules/events/eventsfunction.p...

CVE-2026-117554 Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.php

Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additionalguests field when guests are disallowed. Attackers can set additionalguests to the remaining seat count in modules/events/eventsfunction.p...

EUVD-2026-110832

Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additionalguests field when guests are disallowed. Attackers can set additionalguests to the remaining seat count in modules/events/eventsfunction.p...

ftw

Framework for Testing WAFs FTW Purpose This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP...

Interpretation Conflict

Overview @fastify/express is an Express compatibility layer for Fastify Affected versions of this package are vulnerable to Interpretation Conflict via the normalizeUrl function in index.js when the non-default ignoreDuplicateSlashes option is enabled. When an absolute-form request target e.g...

CVE-2026-41089-Netlogon-RCE

🛡️ CVE-2026-41089-Netlogon-RCE - Analyze critical Windows service security vulnerabilities This repository provides tools to analyze and test the Netlogon vulnerability known as CVE-2026-41089. This tool helps security professionals identify if their Windows Domain Controllers face risks from this...

mitv4-utgard-lpe

MiTV4 Amlogic Utgard — local privilege escalation via unvali...

An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure

This article is published for educational purposes only, to raise awareness among information security professionals. The research was part of an official bug bounty program on a major platform. We notified the cloud provider about the vulnerabilities in line with our responsible disclosure polic...

Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption

The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors. According to Russian cybersecurity...

PPLdump

PPLdump ⚠️ 2022-07-24 - As of Windows 10 21H2 10.0.19044.1826 July 2022 update, the exploit implemented in PPLdump no longer works. A patch in NTDLL now prevents PPLs from loading Known DLLs. More information here. This tool implements a userland exploit that was initially discussed by James...

CVE-2026-117538

REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend packages API, where the function parameter is concatenated into an error message rendered without HTML escaping. Attackers can lure an authenticated backend user to a crafted link containing a valid CSRF...

CVE-2026-116893

REDAXO core before 5.21.5 contains a missing authorization vulnerability in the rexapipackage API function that lets non-admin backend users manage packages with only a valid CSRF token. Attackers holding a token, such as demoted admins with active sessions, can uninstall system addons like...