EUVD-2026-79136

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

EUVD-2026-79134

Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targe...

CVE-2026-19781

Ashlar-Vellum Cobalt is vulnerable to a heap-based buffer overflow in its VS file parsing routine. The root cause is the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer, allowing an attacker to execute arbitrary code in the context of the c...

CVE-2026-19781 Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targe...

CVE-2026-19781 Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targe...

CVE-2026-19886

OriginLab Origin Viewer is vulnerable to remote code execution caused by improper validation of user-supplied data during OGM file parsing , leading to a memory corruption condition. An attacker who convinces a user to open a malicious OGM file (or visit a malicious page) can execute arbitrary co...

CVE-2026-19886 OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability

OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target...

EUVD-2026-79133

OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-19886 OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability

OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-19885 OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the targ...

CVE-2026-19885 OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the targ...

EUVD-2026-79132

OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the targ...

CVE-2026-19885

OriginLab Origin Viewer is vulnerable to a remote code execution flaw in its OGWU file parsing logic. The root cause is a lack of proper validation of user-supplied data, resulting in an out-of-bounds write past the end of an allocated data structure. An attacker who can get a user to open a mali...

CVE-2019-14751_PoC

CVE-2019-14751PoC 针对 CVE-2019-14751 的概念验证（PoC） 漏洞描述 NLTK Downloader 3.5 之前的版本存在目录遍历漏洞，攻击者可通过 NLTK 包（ZIP 存档）中的 ../（点点斜杠）写入任意文件，该问题发生在解压过程中未正确处理此类路径。 更多信息请参阅：https://salvatoresecurity.com/zip-slip-in-nltk-cve-2019-14751/ 复现步骤 1. 将 index.xml 和 zip-slip.zip 放置到可通过 Web 服务器提供服务的目录中，调整权限以允许文件被正常访问。 2. 运...

CVE-2026-90815

A flaw was found in FFmpeg. An out-of-bounds read can occur in the Convolution Filter when processing a specially crafted file due to insufficient bounds checks. This issue can lead to an application crash, resulting in a denial of service. Mitigation Do not process untrusted files using the...

npm-tar-path-traversal-scanner

CVE-2026-31802 — npm tar 路径遍历扫描器 检测存在 CVE-2026-31802 漏洞的 npm 软件包，该漏洞是 tar npm 软件包中的一个路径遍历漏洞，允许在归档解压过程中写入任意文件。 功能特性 扫描 package-lock.json 中的易受攻击的 tar 版本 检查 nodemodules 中已安装的易受攻击软件包 使用特制的 tar 归档测试解压行为 识别导致易受攻击 tar 的依赖链 支持批量扫描多个项目 生成 JSON/CSV 报告 提供修复建议 安装 root@kitploit: git clone...

lava v3.3.1

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

ps5-12.40-jailbreak

PS5 12.40 native exploit, work in progress This is the workin...

EUVD-2026-79123

CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro Removal Windows policy setting is enabled and customers remain protected through the Cloud Anti-malware for Microsoft...

CVE-2026-40058 Vulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for Windows

CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro Removal Windows policy setting is enabled and customers remain protected through the Cloud Anti-malware for Microsoft...