matano

Lac de données de sécurité open source pour AWS Matano Open Source Security data lake est un lac de données de sécurité natif cloud open source, conçu pour les équipes de sécurité sur AWS...

freddy

Freddy der Serialisation Killer - Deserialisierungs-Bug-Finder Eine Burp Suite-Erweiterung zur Erkennung und Ausnutzung von Serialisierungsbibliotheken/APIs. Diese nützliche Erweiterung wurde ursprünglich von Nick Bloor @nickstadb für die NCC Group entwickelt und basiert hauptsächlich auf der...

freddy

Freddy the Serialisation Killer - Deserialization Bug Finder A Burp Suite extension to aid in detecting and exploiting serialisation libraries/APIs. This useful extension was originally developed by Nick Bloor @nickstadb for NCC Group and is mainly based on the work of Alvaro Muñoz and Oleksandr...

CLSA-2026-1787928797 TuxCare security update for org.springframework (15 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 15 CVEs. Fixed in 6.1.20-tuxcare.9...

EXCELntDonut

| \ / /|| | | | | \ | | | | \ / | || | | | ' | | | | |/ | ' | | | | | | | / \ || || || | | | || || | | | | | | | | | |//||| | || |/ /|| | |, || by @JoeLeonJr @FortyNorthSec EXCELntDonut ist ein Generator für XLM-Makros Excel 4.0. Starte mit C-Quellcode EXE und erhalte ein XLM-Makro Excel 4.0, das...

CVE-2026-82330 Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check

A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ compressed decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can result in an application crash, leading to ...

CVE-2026-82330 Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check

A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ compressed decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can result in an application crash, leading to ...

CVE-2026-82330

A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ compressed decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can result in an application crash, leading to ...

CVE-2026-82330

GIMP's file-pvr plugin contains a heap out-of-bounds read in the VQ (compressed) decoder due to a missing memory bounds check. When a specially crafted PVR image file is processed, the decoder reads beyond allocated heap memory, which can cause an application crash (denial of service) or a limite...

EUVD-2026-67739

A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ compressed decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can result in an application crash, leading to ...

CVE-2026-82330

A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ compressed decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can result in an application crash, leading to ...

CVE-2024-12172

CVE-2024-12172 WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses = 3.2.21 - Fehlende Autorisierung zur Aktualisierung beliebiger Benutzer-Metadaten durch authentifizierte Abonnent+ Benutzer Beschreibung Das WP Courses LMS – Online Courses Builder,...

cherrybomb

cherrybombv1.0.png Ferma le specifiche API incomplete 💣 Cos'è Cherrybomb? Cherrybomb è uno strumento CLI scritto in Rust che aiuta a prevenire implementazioni errate del codice nelle prime fasi di sviluppo. Funziona validando e testando la tua API utilizzando un file OpenAPI. Il suo obiettivo...

CVE-2024-11848

CVE-2024-11848 NitroPack = 1.17.0 - Autorização Ausente para Atualização Limitada de Opções por Autenticados Assinante+ Descrição O plugin NitroPack para WordPress é vulnerável a modificação não autorizada de dados devido a uma verificação de capacidade ausente na ação AJAX...

CVE-2024-10728

CVE-2024-10728 PostX var ultpoptionpanel =...

BIT-GRAFANA-2026-17033 CVE-2026-17033 CVE Record

An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL. The attacker is authorized to create the alert, but not to execute script in another user's Grafana session. Grafana renders...

CVE-2026-81341 wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

CVE-2026-81341

wolfEngine (before 1.4.1 ) reuses the AES-CCM nonce on TLS 1.2 and DTLS 1.2 records because it sources the explicit nonce from the record input buffer rather than the TLS sequence number. Since the record layer leaves that field for the cipher to populate, the value is constant, meaning every AES...

CVE-2026-81341 wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

EUVD-2026-67738

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...