CVE-2026-82343

A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack...

CVE-2020-16012-PoC

CVE-2020-16012 | Attacco Side Channel Questa repository contiene Proof of Concept PoC per CVE-2020-16012 , una vulnerabilità side-channel identificata nell'implementazione di CanvasRenderingContext2D.drawImage in Firefox e Chromium. Questo progetto è stato condotto come uno sforzo collaborativo d...

CVE-2025-46445

creationtimestamp| type| source ---|---|--- 2026-08-28 13:00:05+00:00| seen| Telegram/hQtzv6DL4WYG9-NneOqiV4oOQsP1iV4KS9tubsFUfnleU 2026-08-28 13:00:05+00:00| seen| https://t.me/ProfessorDiscussions/30213 2026-08-29 00:00:08+00:00| seen| https://t.me/ProfessorDiscussions/30213 2026-08-29...

CVE-2025-32433

CVE-2025-32433 – Vulnerabilità RCE in Erlang/OTP SSH 📌 Riepilogo CVE-2025-32433 è una vulnerabilità di esecuzione remota di codice RCE che interessa il demone SSH di Erlang/OTP. La causa principale è la gestione non corretta delle richieste di canale SSH pre-autenticazione , che possono essere...

CVE-2026-81733

WWBN AVideo through 30.0 and master up to commit 4cb576e contains a cross-site request forgery vulnerability in plugin/Live/myLiveControls.save.json.php. The endpoint only checks that a user is logged in and processes customUrl, customMessage, and autoRedirect parameters from $REQUEST via a GET...

CVE-2026-42393

The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the configured secret. An attacker with access to the same network as the doveadm service, able to make repeated requests and measure response timing accurately, can learn the length of...

CVE-2026-40203

When IMAP compression is enabled, the same compression state is reused across responses in a session, so response sizes depend on both attacker-supplied mail and other mail in the same mailbox. An attacker that can send mail to a user and can also observe the sizes of that user's IMAP traffic can...

react2shell-evolved

React2Shell Scanner High Fidelity Detection for RSC/Next.js RCE Scanner per il rilevamento di vulnerabilità di Remote Code Execution RCE in applicazioni React Server Components e Next.js. Informazioni React2Shell Scanner è uno strumento specializzato per identificare vulnerabilità di esecuzione...

EUVD-2026-67684

WWBN AVideo through 30.0 and master up to commit 4cb576e contains a cross-site request forgery vulnerability in plugin/Live/myLiveControls.save.json.php. The endpoint only checks that a user is logged in and processes customUrl, customMessage, and autoRedirect parameters from $REQUEST via a GET...

CVE-2026-42393

CVE-2026-42393 affects the doveadm service in Open-Xchange's Dovecot implementation. The password and API key comparison is not fully timing-safe, allowing a network-adjacent attacker who can make repeated requests and accurately measure response times to learn the length of the configured secret...

CVE-2026-42393

The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the configured secret. An attacker with access to the same network as the doveadm service, able to make repeated requests and measure response timing accurately, can learn the length of...

CVE-2026-42393

The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the configured secret. An attacker with access to the same network as the doveadm service, able to make repeated requests and measure response timing accurately, can learn the length of...

EUVD-2026-67669

When IMAP compression is enabled, the same compression state is reused across responses in a session, so response sizes depend on both attacker-supplied mail and other mail in the same mailbox. An attacker that can send mail to a user and can also observe the sizes of that user's IMAP traffic can...

CVE-2026-40203

CVE-2026-40203 affects Open-Xchange Dovecot when IMAP compression is enabled. The root cause is that the same compression state is reused across responses in a session, causing response sizes to depend on both attacker-supplied mail and other mail in the same mailbox. An attacker who can send mai...

CVE-2025-52413

CVE-2025-52413 — Particle Device OS BLE Pufferüberlauf Entdecker : Golden Ticket Labs Anbieter : Particle Datum der Zuweisung : 12. August 2025 MITRE Beschreibung Ein Pufferüberlauf in der Komponente blecontrolrequestchannel.cpp von Particle Device OS v5.6.0 ermöglicht das Überschreiben von...

CVE-2026-80696

In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc4282 Fix reading the minimum alarm voltage Coverity reports an out-of-bounds access when reading the minimum alarm voltage for the VGPIO channel. Add the missing return statement to fix the problem...

AZL-98090 CVE-2026-80654 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Shutdown and free rx mailbox channel A mbox rx channel is requested using mboxrequestchannelbyname in probe. In remove callback, the rx mailbox channel is cleaned up when the rxchan is NULL due to incorrect condition...

CVE-2026-80654

In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Shutdown and free rx mailbox channel A mbox rx channel is requested using mboxrequestchannelbyname in probe. In remove callback, the rx mailbox channel is cleaned up when the rxchan is NULL due to incorrect condition...

CVE-2026-80657

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer The management mailbox channel cleanup helpers can be called from error handling paths when mgmtchann has already been destroyed. Add NULL checks to...

spectre-attack

Esempio di attacco Spectre Esempio di utilizzo dell'exploit "Spectre" rivelato il 2 gennaio 2018 CVE-2017-5753 e CVE-2017-5715 Spectre rompe l'isolamento tra diverse applicazioni. Consente a un attaccante di indurre programmi privi di errori, che seguono le best practice, a far trapelare i propri...