101483 matches found
CVE-2026-90948: Out-of-bounds Write
A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pix...
PT-2026-91224
TripleLift's ad rendering script video-bundle.js contains a DOM-based cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a publisher's domain by sending crafted postMessage payloads without origin validation. Attackers can cause a victim to...
PT-2026-91089
Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit Server Type CPSN-MCB271-. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...
PT-2026-91733
A vulnerability has been found in GPAC 26.07.0. Affected is the function gf sg dom event bubble of the file src/scenegraph/dom events.c of the component MP4Box. The manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit has been...
MiracleLinux 8 : glib2-2.56.4-178.el8_10 (AXSA:2026-1826:17)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1826:17 advisory. xdgmime: heap-based buffer overflow in xdgmimemagicparsemagicline in xdgmimemagic.c CVE-2026-16118 Tenable has extracted the preceding description block...
TencentOS Server 3: gstreamer1-plugins-base (TSSA-2026:1009)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1009 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
PT-2026-91107
A security flaw has been discovered in Tenda W20E 15.11.0.61068 1546 841 CN TDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely...
TencentOS Server 4: gstreamer1-plugins-base (TSSA-2026:0996)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0996 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
Amazon Linux 2 : gstreamer1-plugins-base (ALAS-2026-3922)
The version of gstreamer1-plugins-base installed on the remote host is prior to 1.18.4-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3922 advisory. GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability...
Linux Distros Unpatched Vulnerability : CVE-2026-90949
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP's PSP Paint Shop Pro file loader. When processing a compressed selection channel, a heap-based buffer overflow can occur due to a...
AlmaLinux 8 : glib2 (ALSA-2026:66451)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66451 advisory. xdgmime: heap-based buffer overflow in xdgmimemagicparsemagicline in xdgmimemagic.c CVE-2026-16118 Tenable has extracted the preceding description block directly...
CVE-2026-38332
TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length...
CVE-2026-90577 GPAC MP4Box base_scenegraph.c gf_node_get_field heap-based overflow
A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gfnodegetfield of the file scenegraph/basescenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The...
CVE-2026-90577
CVE-2026-90577 is a heap-based buffer overflow in the MP4Box component of GPAC (up to commit f1219cde), specifically in the function gf_node_get_field within scenegraph/base_scenegraph.c. The vulnerability requires local access with low privileges and no user interaction, resulting in low impact ...
CVE-2026-90577 GPAC MP4Box base_scenegraph.c gf_node_get_field heap-based overflow
A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gfnodegetfield of the file scenegraph/basescenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The...
CVE-2026-90577 GPAC MP4Box base_scenegraph.c gf_node_get_field heap-based overflow
A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gfnodegetfield of the file scenegraph/basescenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The...
Scary_POCs
CVE-2026-48842 - Roundcube Webmail SQL Injection PoC Fil...
PT-2026-90972
TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length...
CVE-2026-90577: Heap-based Buffer Overflow
A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gfnodegetfield of the file scenegraph/basescenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The...