Lucene search
+L

1869 matches found

Snyk
Snyk
added 2026/02/24 3:27 p.m.6 views

Out-of-bounds Read

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 3:27 p.m.9 views

Out-of-bounds Read

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

8.7CVSS6AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 3:27 p.m.9 views

Out-of-bounds Read

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

8.7CVSS6AI score0.00348EPSS
SaveExploits0References2
OSV
OSV
added 2026/02/24 1:16 a.m.3 views

DEBIAN-CVE-2026-24481

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap information disclosure vulnerability exists in ImageMagick's PSD Adobe Photoshop format handler. When processing a maliciously crafted PSD file containin...

7.5CVSS7.7AI score0.00348EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/24 1:16 a.m.16 views

CVE-2026-24484

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for multi-layer nested mvg conversions to svg, leading to DoS. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

5.3CVSS0.00401EPSS
SaveExploits0References3
OSV
OSV
added 2026/02/24 12:29 a.m.6 views

CVE-2026-24481 ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap information disclosure vulnerability exists in ImageMagick's PSD Adobe Photoshop format handler. When processing a maliciously crafted PSD file containin...

7.5CVSS5.5AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/02/17 1:33 p.m.8 views

CVE-2026-2625

A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a specially crafted Red Hat Package Manager RPM file. During the RPM signature verification process, this crafted file can trigger an error in the OpenPGP signature parsing code, leading to an...

5.5CVSS5.4AI score0.00085EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
added 2026/02/16 12:0 a.m.14 views

Exploiting Layer-Specific Vulnerabilities to Backdoor Attack in Federated Learning

Federated learning FL enables distributed model training across edge devices while preserving data locality. This decentralized approach has emerged as a promising solution for collaborative learning on sensitive user data, effectively addressing the longstanding privacy concerns inherent in...

5.5AI score
SaveExploits0
Snyk
Snyk
added 2026/02/12 10:27 p.m.5 views

Improper Restriction of Rendered UI Layers or Frames

Overview Affected versions of this package are vulnerable to Improper Restriction of Rendered UI Layers or Frames in comments. An attacker can cause users to be redirected to a malicious page by injecting CSS that transforms the entire wiki interface into a clickable link area. Remediation Upgrad...

6.3CVSS5.6AI score0.00279EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/02/07 11:15 a.m.409 views

Exploit for Improper Initialization in Linux Linux_Kernel

markdown Chrono-Drip: Temporal Viscosity Exploitation Frame...

7.8CVSS7.6AI score0.88606EPSS
SaveExploits100
GithubExploit
GithubExploit
added 2026/01/30 9:54 a.m.228 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CTT-Memory-Vortex-20805 ​This script utilizes the \alpha=0.030...

5.5CVSS6.1AI score0.05028EPSS
SaveExploits5
CVE
CVE
added 2026/01/29 5:16 p.m.27 views

CVE-2026-24054

Kata Containers Runtime (kata-containers) versions prior to 3.26.0 are affected. When a container image is malformed or has no layers, containerd bind-mounts an empty snapshotter directory for the container rootfs; the Kata runtime then mounts rootfs and may detect it as a block device, causing t...

10CVSS5.8AI score0.00438EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/01/29 5:16 p.m.8 views

CVE-2026-24054 Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layers

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 3.26.0, when a container image is malformed or contains no layers, containerd falls back to bind-mounting an empty snapshotter...

9.3CVSS5.8AI score
SaveExploits0References7
Snyk
Snyk
added 2026/01/29 5:16 p.m.7 views

Improper Check for Unusual or Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions when the container image is malformed or contains no layers. An attacker can cause service disruption and induce filesystem errors by supplying a specially crafted container image...

10CVSS5.9AI score0.00438EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/01/29 5:16 p.m.8 views

CVE-2026-24054 Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layers

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 3.26.0, when a container image is malformed or contains no layers, containerd falls back to bind-mounting an empty snapshotter...

9.3CVSS5.8AI score0.00438EPSS
SaveExploits1References5
GithubExploit
GithubExploit
added 2026/01/28 11:11 a.m.189 views

sqlmap-CTT-v3.0-SQL-Injection-Engine-Full-33-layer-fractal-temporal-resonance-implementation-in-C

sqlmap-CTT-v3.0-SQL-Injection-Engine-Full-33-layer-fractal-tem...

5.9AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/01/27 2:8 p.m.172 views

CTT-LFI-TO-RCE-v1.0---Convergent-Time-Theory-LFI-Exploitation-Framework

🕰️ CTT-LFI-TO-RCE v1.0 - Convergent Time Theory LFI Exploitation...

6AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/01/23 9:36 a.m.263 views

CTT-Sandbox-Escape-PoC

CTT-Sandbox-Escape-PoC CTT-Sandbox-Escape-PoC: Temporal Reson...

5.6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/01/19 12:0 a.m.14 views

The vulnerability of Google Chrome’s Digital Credentials component allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of Google Chrome’s Digital Credentials component is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

5CVSS6AI score0.00168EPSS
SaveExploits0References8Affected Software4
Wiz blog
Wiz blog
added 2026/01/16 5:23 p.m.11 views

Agentic Browser Security: 2025 Year-End Review

Are agentic browsers the new Flash? A 2025 review of new attacks, vendor security layers, and a roadmap for navigating AI browser risks...

6.8AI score
SaveExploits0
Rows per page
Query Builder