272 matches found
Crystal-Loaders
Crystal Loaders This repo contains a couple of PIC loaders and a custom sleepmask COFF for use with Cobalt Strike. They are basic implementations where custom evasion tradecraft must be weaved in using Crystal Palace. Usage 1. Download the Crystal Palace Release distrubtion. 2. Extract the tar...
dotNetPELoader
dotNetPELoader Security Notice Recently, I discovered an unofficial modified version of this project being redistributed outside of this repository. After reviewing the files, I identified additional hidden components and script-loading behavior that do NOT exist in the official source code. Plea...
Brute-Ratel-C4-Community-Kit
Brute-Ratel-C4 This repository contains scripts, configurations and deprecated payload loaders for Brute Ratel C4 https://bruteratel.com/. Anything which is added in the deprecated folder will not be a part of the latest release of BRc4...
Moodle - Cross-Site Scripting/Remote Code Execution
The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system. Moodle versions 4.1.x before 4.1.3 and 4.2.x before...
GHSA-V9PV-5GC8-W2M6 Pillow multi-frame loaders can reuse stale native image storage after mode transitions
Summary Pillow multi-frame image loaders can retain native ImagingCore storage allocated for one frame while changing the Python-side image mode and decoder tiles for a later frame. If frame 0 allocates storage for a narrow mode such as L, and a later frame of the same dimensions switches to a...
Pillow multi-frame loaders can reuse stale native image storage after mode transitions
Summary Pillow multi-frame image loaders can retain native ImagingCore storage allocated for one frame while changing the Python-side image mode and decoder tiles for a later frame. If frame 0 allocates storage for a narrow mode such as L, and a later frame of the same dimensions switches to a...
EUVD-2026-107573
Pillow multi-frame loaders can reuse stale native image storage after mode transitions...
glycin-loaders security update
An update is available for glycin-loaders. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Sandboxed and extendable image decoding. Security Fixes: librsvg:...
Linux Distros Unpatched Vulnerability : CVE-2026-96639
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a...
DEBIAN-CVE-2026-96639
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK data. ImageFile.loadprepare reuses the...
CVE-2026-96639
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK data. ImageFile.loadprepare reuses the...
CVE-2026-96639 Pillow multi-frame loaders can reuse stale native image storage after mode transitions
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK data. ImageFile.loadprepare reuses the...
CVE-2026-96639
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK data. ImageFile.loadprepare reuses the...
CVE-2026-96639
The Pillow Python imaging library (versions 11.0.0 through 13.0.0 ) is vulnerable to out-of-bounds memory operations in multi-frame loaders. The root cause is that ImageFile.load_prepare() reuses stale native storage from a narrow frame mode without verifying if the subsequent frame's mode and si...
CVE-2026-96639 Pillow multi-frame loaders can reuse stale native image storage after mode transitions
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK data. ImageFile.loadprepare reuses the...
CVE-2026-96639
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK data. ImageFile.loadprepare reuses the...
Important: Red Hat Security Advisory: glycin-loaders security update
An update for glycin-loaders is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
PT-2026-120833
Name of the Vulnerable Software and Affected Versions Pillow versions 11.0.0 through 12.x Description Multi-frame loaders in this Python imaging library can retain an ImagingCore allocation created for a narrow frame mode. When a subsequent frame of the same dimensions changes the logical mode an...
Oracle Linux 10 : glycin-loaders (ELSA-2026-86331)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-86331 advisory. 1.0.1-2 - Backport CVE-2026-96889 fix to vendored librsvg Tenable has extracted the preceding description block directly from the Oracle Linux security...
