CVE-2026-101887

BlueALSA bluez-alsa/bluealsad contains a division-by-zero vulnerability in the LC3plus sink decoder a2dp-lc3plus.c, a2dplc3plusdecthread that allows a Bluetooth-adjacent attacker to crash the daemon by sending a crafted RTP media header with an attacker-controlled frame count field set to zero...

flask-session-cookie-manager

Flask 세션 쿠키 디코더/인코더 원저자 : Wilson Sumanang 수정 및 개선 저자 : Alexandre ZANNI 출처 : saruberoz.github.io 종속성 Python 2 또는 Python 3 itsdangerous Flask 설치 패키지 BlackArch Linux pacman -S flask-session-cookie-manager3,2 Git ArchLinux Python 3 및 Python 2 모두: git clone...

CVE-2026-101887 BlueALSA bluealsad LC3plus Decoder Division-by-Zero DoS

BlueALSA bluez-alsa/bluealsad contains a division-by-zero vulnerability in the LC3plus sink decoder a2dp-lc3plus.c, a2dplc3plusdecthread that allows a Bluetooth-adjacent attacker to crash the daemon by sending a crafted RTP media header with an attacker-controlled frame count field set to zero...

EUVD-2026-90456

BlueALSA bluez-alsa/bluealsad contains a division-by-zero vulnerability in the LC3plus sink decoder a2dp-lc3plus.c, a2dplc3plusdecthread that allows a Bluetooth-adjacent attacker to crash the daemon by sending a crafted RTP media header with an attacker-controlled frame count field set to zero...

CVE-2026-101887

The BlueALSA daemon (bluez-alsa/bluealsad ) contains a division-by-zero vulnerability within the LC3plus sink decoder (specifically in a2dp-lc3plus.c and a2dp_lc3plus_dec_thread). A Bluetooth-adjacent attacker can trigger a SIGFPE by establishing an A2DP source connection and transmitting a non-f...

Brosec

概要 tl;dr Brosecは、端末ベースのリファレンスユーティリティで、情報セキュリティ関係者（ブロス＆ブロッテス）が実務中によく使用する便利で（時には複雑な）ペイロードやコマンドを支援するために設計されています。Brosecの最も人気のあるユースケースの一つは、Python、Perl、PowerShellなどのリバースシェルをその場で生成し、クリップボードにコピーする機能です。 ユーザーが必要な変数を設定していることを前提として（ウィキの「はじめに」セクションを参照）、awkコマンドを使用したリバースシェルは次のように簡単に生成できます。 asciicast...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

decoder-plus-plus

Decoder++ Decoder++는 침투 테스터, 소프트웨어 개발자, 그리고 다양한 형식의 데이터를 쉽게 디코딩 및 인코딩하려는 모든 사용자를 위해 설계된 확장 가능한 애플리케이션입니다. 다양한 사전 설치된 스크립트와 코덱, 스마트 디코딩 및 형식 식별 기능을 포함하며, 그래픽 사용자 인터페이스GUI와 명령줄 인터페이스CLI 작업을 모두 지원합니다. 빠른 시작 몇 단계만으로 Decoder++를 시작할 수 있습니다: Install using pip latest:qt6 pip3 install decoder-plus-plusqt6...

astroid

ASTROID v 1.2 著者: Mascerano Bachir dev-labs 法的免責事項: 作者はこのツールの悪用に対する一切の責任を負いません。これは教育目的のみであることを忘れないでください。 説明: このツールは、metasploitを使用してシェルコードを生成し、AvetでデコードしてEXEにコンパイルします。 スクリーンショット: 依存関係: 1 - metasploit-framework 2 - xterm 3 - Wine 4 - MinGW EXE 5 - avet ダウンロード/設定/使用方法: 1? - GitHubからツールをダウンロード git...

FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files

A flaw was found in FFmpeg. A remote attacker could exploit an out-of-bounds memory access vulnerability in the ADX audio decoder by supplying a specially crafted ADX or AAX audio file. This could lead to the attacker triggering both out-of-bounds reads and writes, potentially resulting in...

EUVD-2026-89007

urllib3: Chunked Deflate streaming can enter an infinite loop...

CentOS Linux 8.5 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS8.5:CLSA-2026:1779369622)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1779369622 advisory. - Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is no...

CVE-2026-71972

U-Boot versions through 2026.10-rc5 are affected by an out-of-bounds write vulnerability in the video_display_rle8_bitmap function located in drivers/video/video_bmp.c. An attacker can exploit this by providing a crafted RLE8-compressed BMP image , which can lead to memory corruption adjacent to ...

CVE-2026-71972 U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder

U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the videodisplayrle8bitmap function in drivers/video/videobmp.c. Attackers can supply a crafted RLE8-compressed BMP image to corrupt memory adjacent to the framebuffer and crash the bootloader...

CVE-2026-102635

A flaw was found in ImageMagick. An attacker could exploit this vulnerability by supplying a specially crafted GIF file to be processed by the application. During processing, the GIF decoder reads uninitialized heap memory and writes it into the image metadata, resulting in sensitive information...

CVE-2026-102635

ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can craft malicious GIF files that cause the number parser to read uninitialized heap memory and store contents as image...

DEBIAN-CVE-2026-102635

ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can craft malicious GIF files that cause the number parser to read uninitialized heap memory and store contents as image...

CVE-2026-102635

ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can craft malicious GIF files that cause the number parser to read uninitialized heap memory and store contents as image...

CVE-2026-97688

urllib3 is an HTTP client library for Python. From 2.6.2 until 2.8.0, HTTPResponse.stream and HTTPResponse.readchunked can enter an infinite loop because the Deflate decoder retains trailing bytes as unconsumed input after reaching end-of-stream and repeatedly decodes them without progress. The...

CVE-2026-102635

ImageMagick versions prior to 7.1.2-32 and 6.9.13-57 are vulnerable to an uninitialized heap memory disclosure within the GIF decoder's application extension handler in coders/gif.c. An attacker can craft a malicious GIF file that triggers the number parser to read uninitialized heap memory. This...