Lucene search
+L

3465 matches found

The Hacker News
The Hacker News
•added 2026/04/16 10:30 a.m.•13 views

Hidden Passenger? How Taboola Routes Logged-In Banking Sessions to Temu

A bank approved a Taboola pixel. That pixel quietly redirected logged-in users to a Temu tracking endpoint. This occurred without the bank’s knowledge, without user consent, and without a single security control registering a violation. Read the full technical breakdown in the Security Intelligen...

6AI score
SaveExploits0
AlmaLinux
AlmaLinux
•added 2026/04/16 12:00 a.m.•40 views

Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution v...

7.5CVSS7.2AI score0.00798EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/04/15 9:30 p.m.•17 views

EUVD-2026-23022

A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service DoS. By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a...

5CVSS6AI score0.00223EPSS
SaveExploits0References3
NVD
NVD
•added 2026/04/15 8:16 p.m.•15 views

CVE-2026-40916

A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service DoS. By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a...

5.5CVSS0.00223EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/04/15 8:16 p.m.•15 views

CVE-2026-40916

A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service DoS. By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a...

5.5CVSS5.9AI score0.00223EPSS
SaveExploits0References2
OSV
OSV
•added 2026/04/15 8:16 p.m.•16 views

UBUNTU-CVE-2026-40916

A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service DoS. By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a...

5.5CVSS5.9AI score0.00223EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/04/15 6:58 p.m.•39 views

CVE-2026-40916

A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service DoS. By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a...

5.5CVSS6AI score0.00223EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/04/15 12:00 a.m.•22 views

GIMP 安全漏洞

GIMP is an open-source bitmap image editor developed by the GIMP team. GIMP has a security vulnerability, which stems from a stack buffer overflow in the 4BPP decoding path of the TIM image loader. This vulnerability may cause denial-of-service attacks when opening specially crafted TIM image fil...

5.5CVSS6AI score0.00223EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/14 9:57 p.m.•36 views

CVE-2026-33021

CVE-2026-33021 (libsixel) is a use-after-free in sixel_encoder_encode_bytes() affecting libsixel 1.8.7 and earlier. The bug arises because sixel_frame_init() stores a caller-owned pixel buffer pointer directly in frame->pixels without copying. On a subsequent resize, sixel_frame_convert_to_rgb...

7.3CVSS6.4AI score0.00211EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2026/04/14 9:57 p.m.•13 views

CVE-2026-33021

libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain a use-after-free vulnerability in sixelencoderencodebytes because sixelframeinit stores the caller-owned pixel buffer pointer directly in frame-pixels without making a defensive copy...

7.3CVSS6AI score0.00211EPSS
SaveExploits1References3Affected Software1
The Hacker News
The Hacker News
•added 2026/04/14 2:56 p.m.•22 views

Google Adds Rust-Based DNS Parser into Pixel 10 Modem to Enhance Security

Google has announced the integration of a Rust-based Domain Name System DNS parser into the modem firmware as part of its ongoing efforts to beef up the security of Pixel devices and push memory-safe code at a more foundational level. "The new Rust-based DNS parser significantly reduces our...

9.8CVSS6.1AI score0.0032EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/04/09 7:23 p.m.•14 views

CVE-2026-39639

Missing Authorization vulnerability in redpixelstudios RPS Include Content rps-include-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RPS Include Content: from n/a through = 1.2.2...

6.5CVSS5.9AI score0.00329EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/09 3:16 p.m.•26 views

CVE-2026-5444

A heap buffer overflow vulnerability exists in the PAM image parsing logic. When Orthanc processes a crafted PAM image embedded in a DICOM file, image dimensions are multiplied using 32-bit unsigned arithmetic. Specially chosen values can cause an integer overflow during buffer size calculation,...

7.1CVSS0.00221EPSS
SaveExploits0References3
OSV
OSV
•added 2026/04/09 3:16 p.m.•12 views

DEBIAN-CVE-2026-5443

A heap buffer overflow vulnerability exists during the decoding of PALETTE COLOR DICOM images. Pixel length validation uses 32-bit multiplication for width and height calculations. If these values overflow, the validation check incorrectly succeeds, allowing the decoder to read and write to memor...

9.8CVSS6.2AI score0.00875EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/04/09 3:16 p.m.•10 views

CVE-2026-5443

A heap buffer overflow vulnerability exists during the decoding of PALETTE COLOR DICOM images. Pixel length validation uses 32-bit multiplication for width and height calculations. If these values overflow, the validation check incorrectly succeeds, allowing the decoder to read and write to memor...

9.8CVSS6AI score0.00875EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/09 2:43 p.m.•34 views

CVE-2026-5443 Heap Buffer Overflow in DICOM Image Decoder (Palette Color Decode)

A heap buffer overflow vulnerability exists during the decoding of PALETTE COLOR DICOM images. Pixel length validation uses 32-bit multiplication for width and height calculations. If these values overflow, the validation check incorrectly succeeds, allowing the decoder to read and write to memor...

0.00875EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/09 2:43 p.m.•22 views

CVE-2026-5443

A heap buffer overflow vulnerability exists during the decoding of PALETTE COLOR DICOM images. Pixel length validation uses 32-bit multiplication for width and height calculations. If these values overflow, the validation check incorrectly succeeds, allowing the decoder to read and write to memor...

6.2AI score0.00875EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/09 2:43 p.m.•6 views

CVE-2026-5443 Heap Buffer Overflow in DICOM Image Decoder (Palette Color Decode)

A heap buffer overflow vulnerability exists during the decoding of PALETTE COLOR DICOM images. Pixel length validation uses 32-bit multiplication for width and height calculations. If these values overflow, the validation check incorrectly succeeds, allowing the decoder to read and write to memor...

6AI score0.00875EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/04/09 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-5444

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow vulnerability exists in the PAM image parsing logic. When Orthanc processes a crafted PAM image embedded in a DICOM file, image dimension...

7.1CVSS6.2AI score0.00221EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/09 12:00 a.m.•23 views

PT-2026-31632

A heap buffer overflow vulnerability exists during the decoding of PALETTE COLOR DICOM images. Pixel length validation uses 32-bit multiplication for width and height calculations. If these values overflow, the validation check incorrectly succeeds, allowing the decoder to read and write to memor...

6.2AI score0.00875EPSS
SaveExploits0References4
Rows per page
Query Builder