CVE-2025-55286 z2d OOB drawing with new multi-sample anti-aliasing could lead to invalid memory access and corruption

z2d is a pure Zig 2D graphics library. z2d v0.7.0 released with a new multi-sample anti-aliasing MSAA method, which uses a new buffering mechanism for storing coverage data. This differs from the standard alpha mask surface used for the previous super-sample anti-aliasing SSAA method. Under certa...

CVE-2025-55286 z2d OOB drawing with new multi-sample anti-aliasing could lead to invalid memory access and corruption

z2d is a pure Zig 2D graphics library. z2d v0.7.0 released with a new multi-sample anti-aliasing MSAA method, which uses a new buffering mechanism for storing coverage data. This differs from the standard alpha mask surface used for the previous super-sample anti-aliasing SSAA method. Under certa...

lmdeploy 安全漏洞

lmdeploy is an InternLM open source toolkit for compressing, deploying and servicing LLM. A security vulnerability exists in lmdeploy version 0.7.1 and earlier, which stems from a code injection issue...

GHSA-QV35-3GW6-8Q4J In regclient, pinned manifest digests may be ignored

Impact A malicious registry could return a different digest for a pinned manifest without detection. Patches This has been fixed in the v0.7.1 release. Workarounds After running a regclient.ManifestGet, the returned digest can be compared to the requested digest...

In regclient, pinned manifest digests may be ignored

Impact A malicious registry could return a different digest for a pinned manifest without detection. Patches This has been fixed in the v0.7.1 release. Workarounds After running a regclient.ManifestGet, the returned digest can be compared to the requested digest...

Code injection

Plane version 0.7.1 allows an unauthenticated attacker to view all stored server files of all users...

CVE-2023-2268 Plane v0.7.1 - Unauthorized access to files

Plane version 0.7.1 allows an unauthenticated attacker to view all stored server files of all users...

CVE-2023-2268 Plane v0.7.1 - Unauthorized access to files

Plane version 0.7.1 allows an unauthenticated attacker to view all stored server files of all users...

GHSA-XW5J-GV2G-MJM2 Miscompilation in cortex-m-rt 0.7.1 and 0.7.2

Version 0.7.1 of the cortex-m-rt crate introduced a regression causing the stack to NOT be eight-byte aligned prior to calling main or any other specified entrypoint, violating the stack ABI of AAPCS32, the default ABI used by all Cortex-M targets. This regression is also present in version 0.7.2...

CVE-2022-36078 Slice Memory Allocation with Excessive Size Value in binary

Binary provides encoding/decoding in Borsh and other formats. The vulnerability is a memory allocation vulnerability that can be exploited to allocate slices in memory with arbitrary excessive size value, which can either exhaust available memory or crash the whole program. When using...

PT-2022-23166 · Unknown · Github.Com/Gagliardetto/Binary

Name of the Vulnerable Software and Affected Versions: github.com/gagliardetto/binary versions prior to v0.7.1 Description: The issue is a memory allocation vulnerability that can be exploited to allocate slices in memory with excessive size values, potentially exhausting available memory or...

Blogman v0.7.1 (profile.php) SQL Injection Exploit

Exploit for php platform in category web applications ================================================== Blogman v0.7.1 profile.php SQL Injection Exploit ================================================== !/usr/bin/python Exploit Title: Blogman v0.7.1 profile.php SQL Injection Exploit Date : 28...

Shorty 0.7.1b Insecure Cookie

Vulnerable Software -------------------------------------------------------------------------------- Script: Shorty v0.7.1 Beta maybe other versions URL:http://get-shorty.com/ Download:http://get-shorty.com/beta?force=download Google dork: intitle:"Shorty Beta" Bug...

Shorty 0.7.1b (Auth Bypass) Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================== Shorty 0.7.1b Auth Bypass Insecure Cookie Handling Vulnerability ================================================================== Vulnerable Software...

Shorty 0.7.1b - (Authentication Bypass) Insecure Cookie Handling

Shorty 0.7.1b - Authentication Bypass Insecure Cookie Handling Vulnerable Software -------------------------------------------------------------------------------- Script: Shorty v0.7.1 Beta maybe other versions URL:http://get-shorty.com/ Download:http://get-shorty.com/beta?force=download Google...