[SECURITY] Fedora 43 Update: imhex-1.37.4-3.fc43

ImHex is a Hex Editor, a tool to display, decode and analyze binary data to reverse engineer their format, extract informations or patch values in them. What makes ImHex special is that it has many advanced features that can often only be found in paid applications. Such features are a completely...

[SECURITY] Fedora 42 Update: imhex-1.37.4-3.fc42

ImHex is a Hex Editor, a tool to display, decode and analyze binary data to reverse engineer their format, extract informations or patch values in them. What makes ImHex special is that it has many advanced features that can often only be found in paid applications. Such features are a completely...

CVE-2025-12952: Improper Privilege Management

A privilege escalation vulnerability exists in Google Cloud's Dialogflow CX. Dialogflow agent developers with Webhook editor permission are able to configure Webhooks using Dialogflow service agent access token authentication. This allows the attacker to escalate their privileges from agent-level...

Google Cloud Dialogflow CX security vulnerabilities

Google Cloud Dialogflow CX is a virtual agent building platform from Google, Inc USA. A security vulnerability exists in Google Cloud Dialogflow CX, which stems from a misconfiguration of the Webhook editor permissions that could lead to elevated privileges...

Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vim for Windows. User interaction is required to exploit this vulnerability in that the target must open a malicious file and perform one of a set of specific actions in the editor. The specific flaw...

EUVD-2025-202265

A NULL pointer dereference vulnerability in the importDataObject function of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2025-202282

A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-64085

A NULL pointer dereference vulnerability in the importDataObject function of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-64086

A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-64086

A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-64085

A NULL pointer dereference vulnerability in the importDataObject function of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow vulnerability was discovered in GIMP’s DICOM DCM file parser. The flaw occurs because the application fails to properly validate the length of user-supplied data before copying it to a heap buffer. This can lead to arbitrary code execution when a user opens a speciall...

CVE-2025-64086: NULL Pointer Dereference

A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-64086

PDF-XChange Editor v10.7.3.401 contains a NULL pointer dereference in the util.readFileIntoStream component that can lead to a Denial of Service. The vulnerability is documented across multiple sources (PDF-XChange and Red Hat), with no public details on a fixed version or patch in the provided d...

CVE-2025-64086

A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-64085

A NULL pointer dereference vulnerability in the importDataObject function of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-64085

A NULL pointer dereference vulnerability in the importDataObject function of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-64086

A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

Tiptap Editor security vulnerabilities

Tiptap Editor is an open source text editor framework from Tiptap. A security vulnerability exists in Tiptap Editor versions prior to 2.10.4 that stems from uncleaned user input and could lead to a cross-site scripting attack...

PDF-XChange Editor security vulnerabilities

PDF-XChange Editor is a PDF file viewing software from PDF-XChange running on Microsoft Windows systems. A security vulnerability exists in PDF-XChange Editor version v10.7.3.401, which originates from the presence of a null pointer dereference in the function importDataObject, which could lead t...