CVE-2026-106114 ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions

ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dimensions before confirming that the profile contains the declared values. IccDataReader.ReadClutF32 can request a large float array, and...

CVE-2026-106112 ImageSharp: ICC LUT16 output channel count can write beyond Vector4

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels even though ClutCalculator.Calculate and LutEntryCalculator.CalculateLut store intermediate and output values in Vector4. When DecoderOptions.ColorProfileHandling is set to...

CVE-2026-106112 ImageSharp: ICC LUT16 output channel count can write beyond Vector4

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels even though ClutCalculator.Calculate and LutEntryCalculator.CalculateLut store intermediate and output values in Vector4. When DecoderOptions.ColorProfileHandling is set to...

CVE-2026-106112 ImageSharp: ICC LUT16 output channel count can write beyond Vector4

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels even though ClutCalculator.Calculate and LutEntryCalculator.CalculateLut store intermediate and output values in Vector4. When DecoderOptions.ColorProfileHandling is set to...

CVE-2026-106112

The ImageSharp 2D graphics library (versions 4.0.0 through 4.1.2 ) is vulnerable to an out-of-bounds write (CWE-787) during ICC LUT16 conversion. The root cause is that ClutCalculator.Calculate and LutEntryCalculator.CalculateLut use a Vector4 to store intermediate and output values, but the conv...

CVE-2026-106110

The ImageSharp 2D graphics library (versions 2.0.0 through 4.1.2 ) contains a vulnerability where the TIFF CCITT Group 3 encoder allocates an undersized compressed-data buffer for narrow 1-bit images. Specifically, TiffCcittCompressor.Initialize fails to reserve sufficient space for row data and ...

CVE-2026-80897

A flaw was found in the netfs component of the Linux kernel. When netfspreparereaditerator processes readahead folios, it may fail to release these folios if an error occurs during the rollingbufferloadfromra operation. This oversight can lead to a memory leak, potentially allowing a local attack...

CVE-2026-89811

A flaw was found in the Linux kernel's drm/amdkfd component. This vulnerability arises from a race condition where the Micro Engine Scheduler MES fails to perform a necessary Translation Lookaside Buffer TLB invalidation after unmapping queues. This oversight allows in-flight Direct Memory Access...

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation

Kernel-Chaos-Waffeneinsatz für CVE-2025-62215 zur SYSTEM-Privilegieneskalation Hands‑on‑Analyse von CVE‑2025‑62215, einer Windows-Kernel-Wettlaufsituation, die in freier Wildbahn ausgenutzt wird. Zeigt die Privilegieneskalation zu SYSTEM, Erkennungsskripte und Patch‑Validierungsstrategien für...

dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters

A flaw was found in Dovecot. An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in. This action causes the server to consume excessive memory and CPU resources, leading to the termination of login processes and other active connections...

dovecot: Dovecot: Arbitrary Code Execution via Sieve editheader use-after-free

A flaw was found in Dovecot. An authenticated attacker can use a Sieve script with the editheader extension to trigger a use-after-free vulnerability in the mail editing code. This can lead to memory corruption, potentially crashing the mail delivery process and allowing for arbitrary code...

cve-2026-29923

CVE-2026-29923 — pstrip64.sys Lokale Rechteausweitung Ein minimaler Proof-of-Concept für CVE-2026-29923, eine Schwachstelle im Kernel-Treiber pstrip64.sys EnTech Taiwan PowerStrip ≤ 3.90.736, die es einem unprivilegierten Benutzermodus-Prozess ermöglicht, zu NT AUTHORITY\SYSTEM zu eskalieren. Die...

CVE-2025-5548

CVE-2025-5548 Sicherheitsforschung und technische Analyse von CVE-2025-5548, einer Pufferüberlauf-Schwachstelle, die FreeFloat FTP Server 1.0 betrifft. Dieses Repository dokumentiert das Verhalten der Schwachstelle, die Angriffsflächenanalyse, kontrollierte Proof-of-Concept-Tests sowie defensive...

NativeBypassCredGuard

NativeBypassCredGuard NativeBypassCredGuard ist ein Tool, das dazu entwickelt wurde, Credential Guard zu umgehen, indem es WDigest.dll ausschließlich mit NTAPI-Funktionen exportiert von ntdll.dll patcht. Es ist in zwei Varianten verfügbar: C und C++. Das Tool sucht das Muster "39 ?? ?? ?? ?? 00 8...

windows-api-function-cheatsheets

Windows-API-Funktions-Cheatsheets Kontakt 🌨️ Snowcrash: [email protected] Inhaltsverzeichnis Windows-API-Funktions-Cheatsheets Dateioperationen Prozessverwaltung Speicherverwaltung Thread-Verwaltung Dynamische Linkbibliothek DLL-Verwaltung Synchronisierung Interprozesskommunikation...

CVE202015808

CVE-2020-15808 Ein Proof of Concept für die Ausnutzung der Schwachstelle CVE-2020-15808 auf dem STM32F4 Discovery Board Voraussetzungen Firmware-Version älter als 1.25.2 Board mit VCP z. B. STM32F4 Discovery arm-none-eabi-Toolchain Schritte zur Reproduktion des Exploits 1. Wechsel in das...

CVE-2018-17182

CVE-2018-17182 Linux-Kernel-VMA-UAF-Privilege-Escalation-Schwachstelle CVE-2018-17182 Über Sicherheitsforscher von Google Project Zero haben Details und einen Proof-of-Concept PoC Exploit für eine hochkritische Schwachstelle im Linux-Kernel veröffentlicht, die seit Kernel-Version 3.16 bis 4.18.8...

Eneio64-LPE

Öffnet ein Handle auf den verwundbaren Treiber 2. Mappt physischen Speicher in den Userspace 3. Öffnet ein Handle auf den Systemprozess 4. Fragt die SystemHandleInformation-Tabelle des aktuellen Prozesses ab, um das erhaltene System-Handle zu finden und die EPROCESS-Adresse preiszugeben. 5...

MGASA-2026-0468 Updated tor package fixes security vulnerabilities

Avoid a set of possible memory corruption, double-free, and null pointer dereference bugs that could occur with some reverse DNS virtual address configurations. TROVE-2026-051. Avoid cacheing DNS PTR responses when DNS caching is disabled. Previous code to prevent this caching parsed the response...

Updated tor package fixes security vulnerabilities

Avoid a set of possible memory corruption, double-free, and null pointer dereference bugs that could occur with some reverse DNS virtual address configurations. TROVE-2026-051. Avoid cacheing DNS PTR responses when DNS caching is disabled. Previous code to prevent this caching parsed the response...