CVE-2026-118753

FreeImage (danoli3 fork) versions prior to 3.19.25 are vulnerable to a heap buffer overflow within the PluginGIF.cpp component. The root cause is improper handling of unclipped GIF frame rectangles; specifically, if a crafted GIF's frame left plus width exceeds the logical screen width, the GifPl...

CVE-2026-118753 FreeImage (danoli3 fork) before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositing

FreeImage danoli3 fork before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past the canvas allocation via unclipped GIF frame rectangles. Attackers can craft a GIF whose frame left plus width exceeds the logical screen width, causing...

CVE-2026-118753 FreeImage (danoli3 fork) before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositing

FreeImage danoli3 fork before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past the canvas allocation via unclipped GIF frame rectangles. Attackers can craft a GIF whose frame left plus width exceeds the logical screen width, causing...

PT-2026-129199

FreeImage danoli3 fork before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past the canvas allocation via unclipped GIF frame rectangles. Attackers can craft a GIF whose frame left plus width exceeds the logical screen width, causing...

CVE-2026-118753: danoli3, FreeImage FreeImage: FreeImage (danoli3 fork) before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows…

FreeImage danoli3 fork before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past the canvas allocation via unclipped GIF frame rectangles. Attackers can craft a GIF whose frame left plus width exceeds the logical screen width, causing...

PT-2026-129198

FreeImage danoli3 fork before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to 127 controlled bytes past the...

certipy-merged

certipy-merged This repository contains a fork of ly4k/Certipy with many open pull requests merged, made compatible with each other, and tested to a certain degree. As this is a work in progress , some features may or may not work as expected and things might break. Installation Using pipx...

proxmark3

Deprecated Iceman fork THIS FORK HAS BEEN DEPRECATED, USE RRG/ICEMAN REPO INSTEAD! Ref: Proxmark3 RDV4.0 github repository The RRG/Iceman repo is based upon this repo. Much development has been put into the RRG repo to bring support to all new hardware features. The repo fully support all of them...

CVE-2026-80893

A flaw was found in the Linux kernel's huge page hugetlb memory management. A local user could trigger a memory corruption vulnerability during a process duplication fork operation. This occurs when the kernel incorrectly clears a specific bit in swap entries for huge pages, leading to the...

CrackMapExec

No Longer Maintained This project is no longer mantained due to the existence of a hostile fork. CrackMapExec You are on the latest up-to-date repository of the project CrackMapExec ! 🎉 🚧 If you want to report a problem, open un Issue 🔀 If you want to contribute, open a Pull Request 💬 If you want...

libhtp

LibHTP End-of-Life Announcement July 7, 2026 Following the End of Life of Suricata 7, the libhtp project will no longer be maintained and updated by OISF. Suricata 8 and beyond use a fork of the libhtp code that has been converted and rewritten to Rust. It is available under the same license from...

CLSA-2026-1784277735 kernel: Fix of CVE-2026-64600

xfs: resample the data fork mapping after cycling ILOCK...

CLSA-2026-1784274653 kernel: Fix of 2 CVEs

xfs: resample the data fork mapping after cycling ILOCK - macvlan: observe an RCU grace period in macvlancommonnewlink error path CVE-2026-23209...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc (CENTOS8.4:CLSA-2026:1784277735)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1784277735 advisory. - In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK...

SUSE CVE-2026-111149

FreeImage danoli3 fork through 3.19.23 contains a heap out-of-bounds read vulnerability in Unpack32Bits in PluginPICT.cpp because rowBytes is never checked against the file-controlled PixMap width. Attackers can supply a crafted PICT file with a truncated or undersized rowBytes to over-read up to...

MAL-2026-17900 Malicious code in marocolor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8206a6d3278ef99ffe6f33a695ca3dd6b4ed9856912d79f3066a375d95bcd509 On import of marocolor, a daemon thread recursively walks the user's home directory and uploads every file matching...

BIT-GITEA-2026-103670 Gitea trusted workflow cancellation by unapproved fork runs

When a Gitea Actions run was inserted, older runs in the same workflow-level concurrency group were cancelled without checking whether the new run still needed approval. Because fork pull request runs are inserted under the base repository, a user who can open a pull request from a fork could...

CVE-2026-111149

FreeImage danoli3 fork through 3.19.23 contains a heap out-of-bounds read vulnerability in Unpack32Bits in PluginPICT.cpp because rowBytes is never checked against the file-controlled PixMap width. Attackers can supply a crafted PICT file with a truncated or undersized rowBytes to over-read up to...

CVE-2026-111149

FreeImage danoli3 fork through 3.19.23 contains a heap out-of-bounds read vulnerability in Unpack32Bits in PluginPICT.cpp because rowBytes is never checked against the file-controlled PixMap width. Attackers can supply a crafted PICT file with a truncated or undersized rowBytes to over-read up to...

EUVD-2026-102276

FreeImage danoli3 fork through 3.19.23 contains a heap out-of-bounds read vulnerability in Unpack32Bits in PluginPICT.cpp because rowBytes is never checked against the file-controlled PixMap width. Attackers can supply a crafted PICT file with a truncated or undersized rowBytes to over-read up to...