CVE-2026-78465 Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...

CVE-2026-78465 Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...

CVE-2026-76841

Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass trustremotecode=True as a literal or as an unconditional default: RerankModel.gettokenizer in...

CVE-2023-4911-PoC

Vulnerabilità del Dynamic Loader della GNU C Library CVE-2023-4911 Panoramica La GNU C Library glibc funge da libreria C nel sistema GNU ed è parte integrante dei sistemi basati su Linux. Al suo interno, glibc definisce funzionalità essenziali per i programmi, incluse le system call e funzioni...

Tracking PavinLoader across ClickFix and fake download campaigns

In our previous analysis of the malicious RenPy campaigns, we identified a multi-stage loader deployed as part of the infection chain. Further threat hunting has since shown that the same loader, which we track as PavinLoader , is being used across several different campaigns, including ClickFix...

chimera

Caricatore di DLL hijacking basato su Rust per MobaXterm CVE-2026-6421 con persistenza...

ghidra-mtk-loader

Loader md1img di MediaTek per Ghidra Loader Ghidra per il formato immagine firmware modem md1img di MediaTek. Attualmente è supportato solo il firmware basato su nanoMIPS, ma le funzionalità di base potrebbero comunque funzionare se si sceglie manualmente un'architettura diversa ad es. MIPS duran...

RunPE

RunPE Caricatore riflessivo in C per binari non gestiti. Utilizzo root@kitploit: Usage: RunPE.exe e.g. RunPE.exe C:\Windows\System32\net.exe localgroup administrators Alternative usage: RunPE.exe ---f ---b ---a e.g: RunPE.exe ---f C:\Windows\System32\svchost.exe ---b ---a Opzioni di configurazion...

libpeconv

libPeConv Una libreria per caricare e manipolare file PE. Obiettivi L'obiettivo di libPEConv era quello di creare un "coltellino svizzero" per il caricamento personalizzato di file PE. Raccoglie varie funzioni di supporto che puoi integrare rapidamente nel tuo loader personale. Ad esempio:...

BokuLoader

BokuLoader : Cobalt Strike Reflective Loader Una proof-of-concept di User-Defined Reflective Loader UDRL che mira a ricreare, integrare e potenziare le funzionalità di evasione di Cobalt Strike! Contributori:...

Pokemon-Shellcode-Loader

पोकेमॉन शेलकोड लोडर दिनभर हेक्स देखते-देखते थक गए और '\x41' पॉप करते-करते? बल्कि Lugia/Charmander देखना पसंद करेंगे? मेरे पास आपके लिए समाधान है। @Checkymander से एक ट्वीट आया था जिसमें पोकेमॉन नामों से शेलकोड लोडर बनाने की बात थी। ब्लू टीम को छेड़ने के लिए बढ़िया मज़ेदार प्रोजेक्ट, लेकिन कोई POC...

Linux Distros Unpatched Vulnerability : CVE-2026-77219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafte...

packer-tutorial

Indice 1. Cos'è un packer? : Un'introduzione allo scopo dei packer e una guida su quali siano le necessità di sviluppo di un packer. 2. Prerequisiti : Strumenti necessari per lavorare con questo tutorial. 3. Un assaggio : Una dimostrazione di ciò che costruirai con questo tutorial. 4. Impostare i...

D1rkLdr

D1rkLdr Caricatore di shellcode con implementazione di syscall dinamica indiretta, shellcode in formato MAC, risoluzione delle API dal PEB, chiamata di syscall e risoluzione dell'indirizzo dell'istruzione syscall in fase di esecuzione...

CVE-2026-77219

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

DEBIAN-CVE-2026-77219

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

CVE-2026-77219 GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

CVE-2026-77219 GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

CVE-2026-77219

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

EUVD-2026-64138

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...