Giga Messenger WordPress - Cross-Site Scripting

Giga Messenger WordPress plugin = 2.3.1 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

Oracle Linux 8 : python36:3.6 (ELSA-2026-82858)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-82858 advisory. - Fix CVE-2021-27291: ReDos via crafted malicious input Resolves: rhbz1943459 rhbz1943460 python-pymongo - Backport CVE-2026-88029 python-PyMySQL - Security fi...

Microsoft Excel Code Execution

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to buffer overflow attacks in dynamic memory. Exploiting this vulnerability can allow attackers to execute arbitrary code by sending a specially...

CVE-2026-24660

A heap-based buffer overflow vulnerability exists in the x3floadhuffman functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

PT-2026-3603

A reflected cross-site scripting xss vulnerability exists in the modifyAeTitle functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...

Microsoft Office Unreliable Pointer Code Execution

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to an unreliable pointer assignment mechanism. Exploiting this vulnerability allows attackers to execute arbitrary code by sending a specially crafted malicious file...

Microsoft Office Memory Deallocation Code Execution

The vulnerability of the Microsoft Office suite relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially created malicious file...

Microsoft Excel Code Execution

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to reading data beyond the buffer in memory. Exploitation of this vulnerability could allow an attacker to execute arbitrary code by sending a...

CVE-2025-64538

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by injecting malicious scripts into a web page that are executed in the context of the...

CVE-2025-64538

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by injecting malicious scripts into a web page that are executed in the context of the...

Adobe Animate Buffer Overflow

The vulnerability of the Adobe Animate software for creating multimedia and computer animations relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted malicious file...

Substance 3D Stager Use-After-Free

The vulnerability of the Substance 3D Stager software relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a hacker to execute arbitrary code by sending a specially created malicious file...

Substance 3D Stager Buffer Overflow

The vulnerability of the Substance 3D Stager software lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...

Substance 3D Viewer Buffer Overflow RCE

The vulnerability of the Adobe Substance 3D Viewer application for viewing and editing 3D files is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted maliciou...

NULL Pointer Dereference

MaterialX is vulnerable to NULL pointer dereference. The vulnerability is due to improper handling of shader node parsing in MTLX files, which allows an attacker to craft malicious files that can crash a target program...

Adobe Animate Memory Management Code Execution

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

Adobe Dimension Buffer Overflow

The vulnerability of Adobe Dimension’s 3D design software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted malicious file...

PDF Reader Heap Buffer Overflow Privilege Escalation

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow...

PDF Viewer Uninitialized Pointer Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of an uninitialized pointer during the processing of the itemVariationDataCount field. Exploitin...

Substance 3D Stager Heap Buffer Overflow

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially created...