ImageMagick has a heap-buffer-overflow

Summary While Processing a crafted TIFF file, imagemagick crashes. Details Following is the imagemagick version: imagemagickgit/build26jun23/bin/magick --version Version: ImageMagick 7.1.1-13 Beta Q16-HDRI x8664 56f478940:20230625 https://imagemagick.org Copyright: C 1999 ImageMagick Studio LLC...

GHSA-FFF3-4RP7-PX97 ImageMagick has a heap-buffer-overflow

Summary While Processing a crafted TIFF file, imagemagick crashes. Details Following is the imagemagick version: imagemagickgit/build26jun23/bin/magick --version Version: ImageMagick 7.1.1-13 Beta Q16-HDRI x8664 56f478940:20230625 https://imagemagick.org Copyright: C 1999 ImageMagick Studio LLC...

Vulnerability fixed in Apple macOS, iOS and iPadOS

Apple has fixed a vulnerability in several Apple operating systems. The vulnerability is in how the systems handle processing malicious image files, which can lead to memory corruption. This problem has been addressed by improved memory limit controls. Apple says it has information that this...

Exploit for CVE-2025-9074

CVE-2025-9074 – Docker Desktop Windows Container→Host Write...

Aligning Core Aspects: Improving Vulnerability Proof-Of-Concepts Via Cross-Source Insights

For vulnerabilities, Proof-of-Concept PoC plays an irreplaceable role in demonstrating the exploitability. PoC reports may include critical information such as specific usage, test platforms, and more, providing essential insights for researchers. However, in reality, due to various PoC templates...

Exploit for CVE-2024-4956

CVE-2024-4956 Quick and easy exploitation of CVE-2...

CVE-2025-9389 vim memmove-vec-unaligned-erms.S __memmove_avx_unaligned_erms memory corruption

A vulnerability was identified in vim 9.1.0000. Affected is the function memmoveavxunalignederms of the file memmove-vec-unaligned-erms.S. The manipulation leads to memory corruption. The attack needs to be performed locally. The exploit is publicly available and might be used. Some users are not...

CVE-2025-57105

creationtimestamp| type| source ---|---|--- 2025-08-23 23:00:09+00:00| published-proof-of-concept| Telegram/bqtUyJuekOzfkkAaW-BGPnNsPjtyaz90MXGXm-Pwjvusaw...

CVE-2025-43960

creationtimestamp| type| source ---|---|--- 2025-08-23 15:08:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/48792...

Exploit for Cross-site Scripting in Campcodes Hospital_Management_System

Zero-Day Research 🔍 This repository contains my zero-day fi...

CVE-2025-48355

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ProveSource LTD ProveSource Social Proof provesource allows Retrieve Embedded Sensitive Data.This issue affects ProveSource Social Proof: from n/a through = 3.1.2...

CVE-2025-55745

creationtimestamp| type| source ---|---|--- 2025-08-22 14:04:08+00:00| published-proof-of-concept| https://github.com/unopim/unopim/security/advisories/GHSA-74rg-6f92-g6wx...

CVE-2025-53363

creationtimestamp| type| source ---|---|--- 2025-08-22 10:52:05+00:00| published-proof-of-concept| https://github.com/donknap/dpanel/security/advisories/GHSA-gcqf-pxgg-gw8q...

Exploit for CVE-2023-1234

It is an offensive tool for Linux. This repository contains a pr...

PT-2025-34495

Name of the Vulnerable Software and Affected Versions: gnark versions prior to 0.14.0 Description: gnark is a zero-knowledge proof system framework. The Verify function in eddsa.go and ecdsa.go used the S value from a signature without asserting that 0 ≤ S order, leading to a signature malleabili...

Jim Sanborn Is Auctioning Off the Solution to Part Four of the Kryptos Sculpture

Well, this is interesting: The auction, which will include other items related to cryptology, will be held Nov. 20. RR Auction, the company arranging the sale, estimates a winning bid between $300,000 and $500,000. Along with the original handwritten plain text of K4 and other papers related to t...

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 WinRAR: WinRAR path traversal allowing arbit...

CVE-2025-55743

creationtimestamp| type| source ---|---|--- 2025-08-21 06:05:59+00:00| published-proof-of-concept| https://github.com/unopim/unopim/security/advisories/GHSA-v22v-xwh7-2vrm...

CVE-2025-48355

CVE-2025-48355 affects the WordPress plugin ProveSource Social Proof (versions n/a–3.0.5). The vulnerability is described as Exposure of Sensitive System Information to an Unauthorized Control Sphere, enabling retrieval of embedded sensitive data. Public details note a CVSS v3.1 base score of 5.3...

CVE-2025-48355 WordPress ProveSource Social Proof plugin <= 3.0.5 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ProveSource LTD ProveSource Social Proof allows Retrieve Embedded Sensitive Data.This issue affects ProveSource Social Proof: from n/a through 3.0.5...