Fulgur: Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service)

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.26.0, a childless box that resolves to a pathologically tall height was amplified into thousands of blank PDF pages, even when it produces no visible output. The...

Astra Linux – Vulnerability in Firefox

When styling and rendering an oversized element, Firefox did not apply correct clipping, allowing an attacker to paint over the user interface. This vulnerability affects Firefox versions prior to 89...

[SECURITY] Fedora 44 Update: krita-6.0.2.1-1.fc44

Krita is a sketching and painting program. It was created with the following types of art in mind: - concept art - texture or matte painting - illustrations and comics...

Unplug your way to better code

Welcome to this week's edition of the Threat Source newsletter. Hey, you. Yeah, you! The person endlessly scrolling or typing away at their computer. Did you touch grass today? It's just an expression, but if nature's your thing, that works just fine. What I do mean is that due to the nature of t...

harfbuzz:hb-raster-fuzzer: Crash in evaluate_color_line

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5216672087867392 Project: harfbuzz Fuzzing Engine: honggfuzz Fuzz Target: hb-raster-fuzzer Job Type: honggfuzzasanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ab9d62d4814...

EUVD-2012-2804

Malware in sbrugna...

EUVD-2011-1205

Malware in sbrugna...

EUVD-2014-1822

Malware in sbrugna...

Adobe Substance3D Painter Out-of-Bounds Read Vulnerability (CNVD-2025-19218)

Adobe Substance3D Painter provides real-time 3D texture painting with intelligent material system and physical rendering viewport, supporting 8K resolution material output. An out-of-bounds read vulnerability exists in Adobe Substance3D Painter, which can be exploited by attackers to cause...

Adobe Substance3D Painter Out-of-Bounds Read Vulnerability (CNVD-2025-19239)

Adobe Substance3D Painter provides real-time 3D texture painting with intelligent material system and physical rendering viewport, supporting 8K resolution material output. An out-of-bounds read vulnerability exists in Adobe Substance3D Painter, which can be exploited by attackers to cause...

Adobe Substance3D Painter 缓冲区错误漏洞

Adobe Substance3D Painter provides real-time 3D texture painting with intelligent material system and physical rendering viewport, supporting 8K resolution material output. An out-of-bounds read vulnerability exists in Adobe Substance3D Painter, which can be exploited by attackers to cause...

Adobe Substance3D Painter 缓冲区错误漏洞

Adobe Substance3D Painter provides real-time 3D texture painting with intelligent material system and physical rendering viewport, supporting 8K resolution material output. An out-of-bounds read vulnerability exists in Adobe Substance3D Painter, which can be exploited by attackers to cause...

Adobe Substance3D Painter 缓冲区错误漏洞

Adobe Substance3D Painter provides real-time 3D texture painting with intelligent material system and physical rendering viewport, supporting 8K resolution material output. An out-of-bounds read vulnerability exists in Adobe Substance3D Painter, which can be exploited by attackers to cause...

Adobe Substance3D Painter 缓冲区错误漏洞

Adobe Substance3D Painter provides real-time 3D texture painting with intelligent material system and physical rendering viewport, supporting 8K resolution material output. An out-of-bounds read vulnerability exists in Adobe Substance3D Painter, which can be exploited by attackers to cause...

README: Robust Error-Aware Digital Signature Framework Via Deep Watermarking Model

Deep learning-based watermarking has emerged as a promising solution for robust image authentication and protection. However, existing models are limited by low embedding capacity and vulnerability to bit-level errors, making them unsuitable for cryptographic applications such as digital...

Malware in avail-able-albu-m-down-load-2014-19330-ultimate-painting-yx7k2-dkxzow

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SUSE CVE-2012-2824

Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG painting...

SUSE CVE-2014-1528

The sse2compositesrcx8888888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write and application crash by painting on a CANVAS element...

SUSE CVE-2021-29961

When styling and rendering an oversized element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface. This vulnerability affects Firefox 89...

qualitypaintingservices.com.au Cross Site Scripting vulnerability OBB-2836038

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...