484713 matches found
CVE-2026-55480
A flaw was found in CUPS. Insecure temporary file handling allows a local attacker with print administrative privileges to overwrite arbitrary system files. When configuring a printer, the print service creates a temporary file with a predictable name in a shared directory without verifying wheth...
CVE-2025-30208-PoC
Disclaimer: The vulnerabilities and reproduction steps described in this article are intended solely for cybersecurity research and educational purposes. No one shall use the information provided in this article for illegal purposes or unauthorized system testing. The author assumes no...
CVE-2026-11319
TickTick Android application com.ticktick.task 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename vi...
DEBIAN-CVE-2025-52290
A NULL pointer dereference in the avprivh264hasnumreorderframes function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...
CVE-2025-55667
A segmentation violation in the dumpisomsaps function /mp4box/filedump.c of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-52290
A NULL pointer dereference in the avprivh264hasnumreorderframes function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...
CVE-2025-60480
A heap buffer overflow in the gfodfac4cfgalternativeinfo function /odf/descriptors.c of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
CVE-2026-112282
A flaw was found in libbluray. This vulnerability allows an attacker to cause a Denial of Service DoS through an application crash when processing a specially crafted ClipInfo .clpi file. By supplying a file with an empty entry point map fine table, an out-of-bounds read is triggered during...
CVE-2026-93315
A flaw was found in BuildKit. When proxy networking with Certificate Authority CA injection is enabled, a build can modify its CA certificate bundle before cleanup operations execute. A local user running a build can exploit this issue to cause the cleanup process to hang, resulting in a Denial o...
CVE-2026-79985
A flaw was found in the Apache Camel Server Message Block SMB component, leading to information disclosure and unauthorized file tampering. When retrieving files from a remote share, the component fails to properly validate and restrict file paths returned in directory listings. A compromised or...
EUVD-2026-104525
TickTick Android application com.ticktick.task 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename vi...
CVE-2026-11319
The TickTick Android application (com.ticktick.task) version 8.2.2.0 is vulnerable to a path traversal vulnerability within its exported ShareReceiveActivity . A malicious local application can trigger this by sending a crafted content:// URI via ACTION_SEND intents. The root cause is the unsanit...
CVE-2026-11319 TickTick Android 8.2.2.0 Path Traversal via ShareReceiveActivity
TickTick Android application com.ticktick.task 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename vi...
CVE-2026-11319 TickTick Android 8.2.2.0 Path Traversal via ShareReceiveActivity
TickTick Android application com.ticktick.task 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename vi...
Important: Red Hat Security Advisory: gegl04 security update
An update for gegl04 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing
A flaw was found in GIMP, specifically within the parsing of High Dynamic Range HDR files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafte...
Important: Red Hat Security Advisory: gegl04 security update
An update for gegl04 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing
A flaw was found in GIMP, specifically within the parsing of High Dynamic Range HDR files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafte...
CVE-2023-47400
CVE-2023-47400 Proof of Concept for the CVE-2023-47400 Authenticated PHP Remote Code Execution via Arbitrary file write on Nagios XI 5.11.0 !Note This poc is based on the technical advisory published by NCC group...
CVE-2026-110263
A flaw was found in OW2 ASM. An attacker could cause a Denial of Service DoS by providing a specially crafted Java class file containing deeply nested generic type signatures. When the library parses these signatures using the SignatureReader component, uncontrolled recursion exhausts available...