DEBIAN-CVE-2026-92248

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

CVE-2026-92248

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

CVE-2026-92259

Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-based buffer overflow and denial of service via a crafted cache file. This issue affects Escargot: ac94df78493ee6fede286620d94f724e46b4d23...

CVE-2026-92248 Gimp: integer overflow when generating a thumbnail preview for a psd file

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

CVE-2026-92248 Gimp: integer overflow when generating a thumbnail preview for a psd file

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

CVE-2026-92248

CVE-2026-92248 is a heap-based buffer overflow in the file-psd plugin of GIMP . When GIMP generates a thumbnail preview for a specially crafted PSD file, an integer overflow occurs during multiplication of values from an embedded JPEG header, causing an undersized heap allocation. The subsequent ...

CVE-2026-92248

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

PoC-CVE-2022-26809

PoC-CVE-2022-26809 PoC para CVE-2022-26809, el análisis y las consideraciones se muestran en github.io. El PoC se ha escrito sobrescribiendo funciones de Impacket. Probado con: impacket versión 0.10.0 El PoC no se ha probado completamente, porque debería desencadenar la vulnerabilidad, es decir, ...

CVE-2026-92259

CVE-2026-92259 is an integer overflow or wraparound vulnerability in Samsung Opensource Escargot , an open-source JavaScript engine. An attacker with local write access to the bytecode-cache directory can plant a crafted cache file that triggers a heap-based buffer overflow , resulting in a denia...

CVE-2026-92259

Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-based buffer overflow and denial of service via a crafted cache file. This issue affects Escargot: ac94df78493ee6fede286620d94f724e46b4d23...

CVE-2014-0195

CVE-2014-0195 Desbordamiento de heap en OpenSSL PoC CVE-2014-0195...

cve-2021-29627

CVE-2021-29627 Algún código para desencadenar el bug incluyendo macsetfd spray. Se necesita algún spray target, sin embargo...

CVE-2026-92248

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

Triple_fetch

triplefetch - ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1247 Este es un exploit para CVE-2017-7047, un error lógico en libxpc que permitía a remitentes de mensajes maliciosos enviar objetos xpcdata que estaban respaldados por memoria compartida. Los consumidores de mensaje...

CVE-2023-4911

CVE-2023-4911 - Looney Tunables Esto es una prueba de concepto por ahora bastante rudimentaria para CVE-2023-4911. Hasta ahora solo he verificado que funciona en Ubuntu 22.10 kinetic. La versión actual del exploit contiene una cantidad considerable de offsets "mágicos". Si tienes sugerencias sobr...

CVE-2023-28753

CVE-2023-28753 Una vulnerabilidad de desbordamiento de enteros que potencialmente conduce a la corrupción de la memoria del heap. Para demostrar la corrupción del heap: compila el servidor ncrx con ASAN root@kitploit: make ./ncrx 31337 cliente adversario root@kitploit: python exploit.py -g | nc -...

CVE-2026-69218

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, When Ember receives an HTTP/2 HEADERS or PUSHPROMISE frame without ENDHEADERS, H2Connection buffers the header block and subsequent CONTINUATION fragments without a size bound. A remote peer can keep an incomplete bloc...

CVE-2021-3156

CVE-2021-3156 Resumen Desbordamiento de búfer basado en montón en Sudo CVE-2021-3156 Vulnerabilidad de desbordamiento de montón causada por el escape incorrecto de \ en sudo, LPE Versiones afectadas Todas las versiones desde 1.8.2 hasta 1.8.31p2 Todas las versiones estables desde 1.9.0 hasta...

Nginx-Rift

NGINX Rift Prueba de concepto de RCE para CVE-2026-42945 , un desbordamiento crítico de búfer en el montón en el módulo ngxhttprewritemodule de NGINX introducido en 2008. El error permite la ejecución remota de código no autenticada contra servidores que utilizan las directivas rewrite y set. Est...

CVE-2026-69202 Http4s Ember HTTP/2: unbounded inbound body buffering

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/2 flow-control window is replenished according to bytes received from the network rather than bytes consumed by the application, while each stream stores DATA in an unbounded channel. A hostile peer can...