43 matches found
DecodeBox
OWASP DecodeBox Encode. Decode. Identify. https://github.com/user-attachments/assets/93eb8f92-7e93-4324-8d94-73d7040379f0 Project Status Pre-release, and already usable. The workbench runs, the detection engine unwraps layered payloads, and the analysis report is complete. Engine: 504 operations...
CVE-2026-108985
A flaw was found in libnfs. During data decoding, the library fails to honor the maximum buffer size specified by the caller when processing data structures such as strings, bytes, and arrays. A remote attacker could exploit this vulnerability by providing specially crafted network data, triggeri...
decoder-plus-plus
Decoder++ Decoder++ es una aplicación extensible diseñada para pentesters, desarrolladores de software y cualquier persona que necesite decodificar y codificar datos sin esfuerzo en diversos formatos. Incluye una amplia gama de scripts y códecs preinstalados, decodificación inteligente e...
OpenEXR unpack_sample_table DeepTiledInputFile readPixelSampleCounts System Failure
The vulnerabilities of the functions unpacksampletable and DeepTiledInputFile::readPixelSampleCounts in software for storing images in OpenEXR format with a wide dynamic range are related to the situation where the operation’s output goes beyond the buffer boundaries during data decoding...
OpenEXR Image Read Pixels Heap Buffer Overflow DoS
The vulnerability of the Imf::InputFile::readPixels method in software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to the occurrence of the operation out of buffer boundaries during data decoding. Exploiting this vulnerability can allow an attacker ...
OpenEXR Image Read Pixels Heap Buffer Overflow DoS
The vulnerability of the Imf::InputFile::readPixels method in software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to the occurrence of the operation out of buffer boundaries during data decoding. Exploiting this vulnerability can allow an attacker ...
CVE-2026-3853
The Divi theme for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the imagesrc attribute of the etpbvideoslideritem shortcode in all versions up to, and including, 4.27.6. This is due to the imagesrc field not being included in the $urloptions whitelist which only contains...
DEBIAN-CVE-2026-59886
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float...
CVE-2026-6094
Heap buffer overread in wcPKCS7DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS...
CVE-2026-46130
A flaw was found in the Linux kernel's device-mapper verity forward error correction dm-verity-fec component. This vulnerability occurs because a function responsible for decoding parity data makes an incorrect assumption about how these data blocks are read. Under specific, non-default...
CVE-2026-44289
CVE-2026-44289 affects protobufjs. Before versions 7.5.6 and 8.0.2, decoding nested protobuf data could recurse without a depth limit, affecting both skipping unknown group fields and generated decoding of nested message fields. A crafted binary payload could exhaust the JavaScript call stack, ca...
GHSA-685M-2W69-288Q protobuf.js: Denial of service through unbounded protobuf recursion
Summary protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected both skipping unknown group fields and generated decoding of nested message fields. A crafted protobuf binary payload could cause the JavaScript call stack to be exhausted during decoding...
urllib3: urllib3 Streaming API improperly handles highly compressed data
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header e.g., gzip, deflate, br, or zstd. The library must read compressed data from the network and decompress it...
CVE-2025-47392
CVE-2025-47392 describes a memory corruption issue that occurs when decoding corrupted satellite data files with invalid signature offsets. The NVD records a CVSS v3.1 base score of 8.8 (HIGH) with adjacent attack vector, no privileges or user interaction required, and high impact on confidential...
PT-2026-30638
Memory corruption when decoding corrupted satellite data files with invalid signature offsets...
urllib3: urllib3 Streaming API improperly handles highly compressed data
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header e.g., gzip, deflate, br, or zstd. The library must read compressed data from the network and decompress it...
urllib3: urllib3 Streaming API improperly handles highly compressed data
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header e.g., gzip, deflate, br, or zstd. The library must read compressed data from the network and decompress it...
USN-7918-1 netty vulnerabilities
Jeppe Bonde Weikop discovered that Netty incorrectly parsed HTTP messages. When Netty is used with certain reverse proxies, a remote attacker could possibly use this issue to perform HTTP request smuggling attacks. CVE-2025-58056 Jonas Konrad discovered that Netty did not properly manage memory...
