CVE-2026-59183

CVE-2026-59183 affects OpenEXR , the reference implementation for the EXR image format widely used in the motion picture industry. The vulnerability is a signed int32_t multiplication overflow in OpenEXRCore's unpack_sample_table() function, triggered while decoding a crafted deep tiled EXR file ...

EUVD-2026-65185

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12, and 3.4.13 contain an infinite-loop vulnerability in SampleCountChannel. The helper roundListSizeUp rounds a sample-list size up to the...

log4j2-exploit

Log4Shell CVE-2021-44228 概念実証 要件 Java JDK/JRE 8 以降のバージョン curl exploitable シンプルなSpring Bootアプリケーションで、ユーザー名とパスワードのログインページを提供します。POSTで / に送信されたユーザー名をログに記録します。アプリケーションがユーザー入力のログを記録する必要はありません。脆弱なバージョンのlog4j2を使用するアクセスログを有効にするだけで十分です。 実行方法: root@kitploit: cd exploitable ../mvnw -q spring-boot:run...

CVE-2026-55371 OpenEXR: OpenEXRCore exr_attr_set_bytes() accepts NULL type_hint with positive hint_length

OpenEXR is the reference implementation and specification for the EXR high-dynamic-range image file format, widely used in the motion picture industry. Versions 3.4.0 through 3.4.12 contain a NULL pointer dereference in the OpenEXRCore function exrattrsetbytes. The public setter validates the...

EUVD-2026-65184

OpenEXR is the reference implementation and specification for the EXR high-dynamic-range image file format, widely used in the motion picture industry. Versions 3.4.0 through 3.4.12 contain a NULL pointer dereference in the OpenEXRCore function exrattrsetbytes. The public setter validates the...

CVE-2026-55371

OpenEXR (the reference implementation for the EXR high-dynamic-range image format) versions 3.4.0 through 3.4.12 contain a NULL pointer dereference in the OpenEXRCore function exr_attr_set_bytes(). The public setter validates the top-level value pointer but fails to check that the nested type_hin...

CVE-2019-17234b-Exploit

Wordpress IgniteUp 플러그인 취약점 Wordpress IgniteUp 플러그인 v3.4 이하에서는 원격의 인증되지 않은 사용자가 대상 웹 서버의 임의 파일을 잠재적으로 삭제하여 서비스 거부DoS 공격을 유발할 수 있습니다. CVE-2019-17234 타임라인 해당 취약점은 2019년 9월 20일에 wordpress.org 팀에 보고되었으며, 플러그인의 새 버전 3.4.1은 2019년 11월 8일에 출시되었습니다.3 배경 IgniteUp은 인기 있는 워드프레스 플러그인으로, 사용자에게 사이트가 곧 출시, 유지보수 ...

regexploit

Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...

CVE-2022-26726-POC2

このリポジトリには README がありません。...

CVE-2026-55059

OpenEXR (the reference implementation for the EXR deep image format) versions prior to 3.2.10, 3.3.12, and 3.4.13 contain a heap out-of-bounds write in Imf_4_0::SampleCountChannel::set(). The root cause is that the row-based sample-count setter computes the target Y coordinate using dataWindow.mi...

CVE-2026-54920 OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...

EUVD-2026-65182

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...

CVE-2026-54920

OpenEXR (reference implementation for the EXR image format, widely used in the motion picture industry) versions 3.4.0 through 3.4.12 contain a denial of service vulnerability in the HTJ2K decode path . A crafted HTJ2K-compressed EXR file with a QCD marker whose lower five bits are zero is passed...

CVE-2025-24813-PoC-Apache-Tomcat-RCE

Apache Tomcat CVE-2025-24813 개념 증명PoC Apache Tomcat 역직렬화 취약점CVE-2025-24813에 대한 개념 증명 익스플로잇입니다. 이 도구는 공격자가 Tomcat의 세션 관리에서 안전하지 않은 역직렬화를 어떻게 악용할 수 있는지 보여줍니다. 경고 : 이 도구는 승인된 보안 테스트 및 교육 목적으로만 사용해야 합니다. 소유하지 않은 시스템에 대한 무단 사용은 불법입니다. 기능 기본안전 페이로드 및 사용자 정의 페이로드 지원 SSL/TLS 지원 선택적 인증 확인 우회 가능 색상 코드 출력으로...

CVE-2020-3161

CVE-2020-3161 Cisco IP Phone 11.7 - サービス拒否 PoC...

python-pyasn1 security update

0.3.7-6.2 - Fix denial of service in Real type float method CVE-2026-59886 - Resolves: RHEL-217908...

Important: python-pyasn1 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RHEL 10 : nginx (RHSA-2026:59220)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59220 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage...

nginx security update

1.26.3-6.0.1.el102.6 - Reference oracle-indexhtml within Requires Orabug: 33802044 2:1.26.3-6.6 - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Important) (RHSA-2026:59135)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59135 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...