27956 matches found
GHSA-6HJR-V6G4-3FM8 ImageMagick is vulnerable to an integer Overflow in TIM decoder leading to out of bounds read (32-bit only)
Summary The TIM PSX TIM image parser in ImageMagick contains a critical integer overflow vulnerability in the ReadTIMImage function coders/tim.c. The code reads width and height 16-bit values from the file header and calculates imagesize = 2 width height without checking for overflow. On 32-bit...
ImageMagick is vulnerable to an integer Overflow in TIM decoder leading to out of bounds read (32-bit only)
Summary The TIM PSX TIM image parser in ImageMagick contains a critical integer overflow vulnerability in the ReadTIMImage function coders/tim.c. The code reads width and height 16-bit values from the file header and calculates imagesize = 2 width height without checking for overflow. On 32-bit...
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: CVE-2025-27516: Fixed sandbox breakout through attr filter selecting format method bsc1238879 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2025:1004-2 Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2025-27516: Fixed sandbox breakout through attr filter selecting format method bsc1238879...
Malicious code in rum-events-format (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6a17ba09614cd69d096859385577957b2737a3dce290dda9712c51fd7179c5 The package rum-events-format was found to contain malicious code. Source: ghsa-malware...
MAL-2025-192417 Malicious code in rum-events-format (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6a17ba09614cd69d096859385577957b2737a3dce290dda9712c51fd7179c5 The package rum-events-format was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-202375
Malicious code in rum-events-format npm...
Malicious Package
Overview rum-events-format is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malware in rum-events-format
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2025-65296
Several Aqara smart home products are susceptible to NULL-pointer dereference vulnerabilities during JSON processing . Specifically, these issues affect the Aqara Hub M2 (version 4.3.6_0027) , Hub M3 (version 4.3.6_0025) , and Camera Hub G3 (version 4.1.9_0027) . An attacker can provide malformed...
PT-2025-50515
Eibiz i-Media Server Digital Signage 3.8.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through AMF-encoded object manipulation. Attackers can send crafted serialized objects to the /messagebroker/amf endpoint to create administrative...
CLSA-2025-1765310613 python-jinja2: Fix of CVE-2024-56326
CVE-2024-56326: fix format string vulnerability impacting users of applications which execute untrusted template...
CLSA-2025-1765289777 Fix CVE(s): CVE-2025-11839, CVE-2025-11840
SECURITY UPDATE: remove abort call in debug format printing code - debian/patches/CVE-2025-11839.patch: remove call to abort in the debug format printing code, allowing display of fuzzed input files to complete without triggering an abort - CVE-2025-11839 SECURITY UPDATE: fix SEGV in vfinfo -...
CLSA-2025-1765287413 python-jinja2: Fix of CVE-2024-56326
CVE-2024-56326: fix format string vulnerability impacting users of applications which execute untrusted template...
gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
A heap-based buffer overflow vulnerability was discovered in GIMP’s DICOM DCM file parser. The flaw occurs because the application fails to properly validate the length of user-supplied data before copying it to a heap buffer. This can lead to arbitrary code execution when a user opens a speciall...
PT-2025-50132
Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.0 and earlier Description The DNG SDK is affected by a Heap-based Buffer Overflow that may result in memory exposure or application denial of service. An attacker could exploit this issue to disclose sensitive memory...
crackme-project
Crackme - Binary Exploitation Challenge Projektbeschreibun...
CGA-6P35-9P6Q-QV56
Bulletin has no description...
CVE-2025-13066
CVE-2025-13066 refers to the WordPress plugin Demo Importer Plus (versions up to and including 2.0.6) with an authenticated file upload flaw: insufficient file-type validation allows WXR files, letting double-extension files bypass sanitization and upload arbitrary files. The vulnerability requir...
