CVE-2026-97185

A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...

How to hide vulnerability in WordPress

The developers of WordPress have uncovered a vulnerability within the software. A malicious individual could exploit this vulnerability using the identifier CVE-2026-87902, allowing them to load a local PHP file into the active theme files without authentication. Under certain conditions related ...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...

Critical: Red Hat Security Advisory: unbound security update

An update for unbound is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY

A flaw was found in Unbound's DNSSEC validator. A remote attacker can exploit this vulnerability by controlling a malicious zone and sending a specially crafted DNSKEY record. This can lead to a heap buffer overflow, potentially resulting in a denial of service or remote code execution...

Security update for hplip

This update for hplip fixes the following issues: CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions bsc1281303. CVE-2026-91098: hi...

SUSE-SU-2026:4335-1 Security update for hplip

This update for hplip fixes the following issues: - CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions bsc1281303. - CVE-2026-91098...

EUVD-2026-85817

A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...

CVE-2026-97185 Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file

A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...

CVE-2026-97185

A flaw in the GIMPressionist plugin for GIMP allows an out-of-bounds write due to improper validation of vector indices when processing a specially crafted preset file . This memory corruption can lead to a program crash or arbitrary code execution if an attacker convinces a user to load a malici...

CVE-2026-97185

A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...

CVE-2025-62369

CVE-2025-62369 PoC Este script explota CVE-2025-62369 en Xibo CMS para ejecutar un comando de reverse shell. Autor Nombre: Cristian Branet GitHub: cristibtz Uso 1. Iniciar un listener root@kitploit: nc -lvnp 2. Ejecutar el exploit root@kitploit: python3 exploit.py -u "http://:" -s "" -i -p : IP...

CVE-2024-7591-PoC

CVE-2024-7591-PoC Estos scripts PoC en Python prueban el Kemp LoadMaster para detectar ejecución remota de código. ESTA HERRAMIENTA ESTÁ DISEÑADA SOLO CON FINES DE PRUEBA Estos scripts se basaron en el artículo de Marius Walter sobre los detalles de este exploit. Puedes leer su publicación en:...

CVE-2026-97152

A flaw was found in Nanomsg. A remote attacker could exploit a buffer overflow vulnerability in the WebSocket transport by sending a specially crafted Sec-WebSocket-Version header. This issue arises from an unchecked copy operation using snprintf. Successful exploitation of this flaw could lead t...

CVE-2019-11231-PoC

Exploit RCE de GetSimpleCMS CVE-2019-11231 Exploit de ejecución remota de código no autenticado para GetSimpleCMS ≤ 3.3.15 Vulnerabilidad GetSimpleCMS expone archivos sensibles públicamente /data/other/authorization.xml, /data/users/, lo que permite a los atacantes: 1. Filtrar claves de API y...

React2Shell-CVE-2025-55182

🔥React2Shell - CVE-2025-55182 / CVE-2025-66478 Prueba de Concepto Demostración de Vulnerabilidad de Seguridad Crítica - CVSS 10.0 - Ejecución Remota de Código en Componentes de Servidor de React ⚠️DESCARGO DE RESPONSABILIDAD SOLO CON FINES EDUCATIVOS! Este repositorio demuestra una vulnerabilidad...

CVE-2025-47916

CVE-2025-47916 - Vulnerabilidad de Ejecución Remota de Código RCE en Invision Community Acerca de Este repositorio proporciona una descripción de prueba de concepto para CVE‑2025‑47916 , una vulnerabilidad de Ejecución Remota de Código que afecta a las versiones 5.0.0 a 5.0.6 de Invision Communit...

CVE-2015-8522.RCE

CVE-2015-8522 La aplicación Tivoli FastBack Server 6.1.4 es vulnerable a un desbordamiento de búfer basado en pila que permite a los actores de amenazas obtener ejecución de código arbitrario ACE a través de una conexión TCP remota. El PoC proporcionado en este repositorio aprovecha esta...

xwiki-cve-2025-24893-exploit

Exploit de XWiki CVE-2025-24893 Exploit de ejecución remota de código sin autenticación para versiones de XWiki vulnerables a CVE-2025-24893. Resumen de la Vulnerabilidad Las versiones de XWiki anteriores a 15.10.9 son vulnerables a RCE sin autenticación mediante inyección de scripts Groovy en el...