CVE-2021-22204

CVE-2021-22204 Résumé de la CVE L'assainissement inapproprié des données utilisateur dans le format de fichier DjVu dans les versions 7.44 et ultérieures d'ExifTool permet l'exécution de code arbitraire lors de l'analyse de l'image malveillante. Versions affectées Version 7.44 - 12.23 Anomalies...

exploit-CVE-2021-22204

Эксплойт для CVE-2021-22204 ExifTool - Выполнение произвольного кода Нравится репозиторий? Поставьте нам ⭐! Только для образовательных и авторизованных исследовательских целей в области безопасности. Автор эксплойта @UNICORDev от @NicPWNs и @Dev-Yeoj Описание уязвимости Некорректная нейтрализация...

CVE-2022-44268-automated-poc

CVE-2022-44268 ImageMagick Lecture Arbitraire de Fichiers poc Entièrement Automatisé ⚙ Une vulnérabilité de divulgation d'informations qui pourrait être exploitée pour lire des fichiers arbitraires depuis un serveur lors de l'analyse d'une image. Version d'ImageMagick concernée root@kitploit:...

Samsung-CVE-2025-21042

🔐 CVE-2025-21042 — Exécution de code à distance dans le codec d'image Samsung ⚙️ Qu'est-ce que c'est Une vulnérabilité critique dans la bibliothèque de traitement d'image de Samsung libimagecodec.quram.so — utilisée sur les appareils Galaxy Android. 🧩 Il s'agit d'une faille d'écriture hors limites...

CVE-2021-22204

CVE-2021-22204 Description La neutralisation incorrecte des données utilisateur dans le format de fichier DjVu dans ExifTool versions 7.44 et ultérieures permet l'exécution arbitraire de code lors de l'analyse de l'image malveillante Script Script Link Utilisation du script : Commande système :...

adiskreader-secretsdump

🚩 스폰서 이 프로젝트가 마음에 든다면, 브라우저에서 실행되는 완전한 침투 테스트 제품군인 OctoPwn의 라이선스 구매를 고려해 보세요! 새 빌드/릴리스 및 기타 정보를 알림으로 받으려면 Discord에 참여하세요. adiskreader-secretsdump 로컬 또는 원격 디스크 이미지에서 레지스트리 및 NTDS 비밀 정보를 추출합니다 🚩 브라우저에서 실행 이 프로젝트는 다른 많은 침투 테스터 도구와 함께 OctoPwn의 힘으로 브라우저에서 실행됩니다! 커뮤니티 버전은 OctoPwn - Live에서 확인하세요. 설치 git...

CVE-2026-78465

An integer overflow in the file-pcx plugin of GIMP affects 32-bit builds only . When a crafted PCX image file sets the number of color planes to 4 alongside sufficiently large dimensions, the memory allocation size calculation exceeds the 32-bit integer limit, producing an undersized heap buffer ...

Astra Linux – Vulnerability in openimageio

A read vulnerability exists in the handling of IPTC data when parsing TIFF images in OpenImageIO v2.3.19.0. A specially crafted TIFF file can cause a read of adjacent heap memory, potentially exposing sensitive process information. An attacker can provide a malicious file to exploit this...

CVE-2026-18303

GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2026-77118

A heap out-of-bounds write exists in the Photo CD PCD decoder of GraphicsMagick. In DecodeImage coders/pcd.c, the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is...

MINI-CV28-GHF4-WGHC

Bulletin has no description...

DEBIAN-CVE-2026-74552

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after devmhwmondeviceregisterwithinfo has been called. At that time, data-hwmondev is not y...

DEBIAN-CVE-2026-74407

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps with WLAN firmware crash recovery SSR. The crash is a NULL pointer dereference in the MHI teardown path while freeing DMA-backed...

DEBIAN-CVE-2026-74314

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpfobjfreefields when a value is being replaced or recycled. That makes field destruction depend on the context of the update/delete...

DEBIAN-CVE-2026-72491

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma-state in transrdma.c The rdma-state field is modified without holding reqlock in both recvdone and p9cmeventhandler, while rdmarequest accesses the same field under the reqlock spinlock. This...

DEBIAN-CVE-2026-72405

In the Linux kernel, the following vulnerability has been resolved: net: udptunnel: prevent double queueing in udptunnelnicdevicesync Yue Sun reported a use-after-free and debugobjects warning in udptunnelnicdevicesyncwork during concurrent device operations. The workqueue core clears the interna...

DEBIAN-CVE-2026-72266

In the Linux kernel, the following vulnerability has been resolved: fbdev: vesafb: fix memory leak in vesafbprobe Since commit 73ce73c30ba9 "fbdev: Transfer video= option strings to caller; clarify ownership" the string returned from fbgetoptions is expected to be freed by the caller. But the...

FreeBSD : OpenEXR -- 3.4.14 fixes multiple vulnerabilities (56449320-97c5-11f1-84d7-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 56449320-97c5-11f1-84d7-3c7c3fba4204 advisory. Cary Phillips reports: The OpenEXR 3.4.14 release addresses the following security...

Important: Red Hat Security Advisory: compat-libtiff3 security update

An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

Important: Red Hat Security Advisory: compat-libtiff3 security update

An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...