CVE-2026-104477 Showdown through 2.1.0 XSS via unescaped quote in href and src attributes

Showdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and image subparsers, which fail to escape double quotes in destination URLs placed into href and src attributes. Attackers can craft markdown links or images containing a double quote followed by onerror or...

NPM: probe-image-size: Quadratic-time Denial of Service in the SVG Parser

NPM: probe-image-size: Quadratic-time Denial of Service in the SVG Parser vulnerability discovered by ? in WordPress Npm probe-image-size versions = 7.3.0...

probe-image-size: Quadratic-time Denial of Service in the SVG Parser

Overview probe-image-size scans the SVG header with a searching regular expression, //. On input that contains many , the engine restarts the ^ scan at every position and runs to end of input each time, giving quadratic time complexity. Both the synchronous and the streaming parser are affected...

CVE-2022-45472

CVE-2022-45472 DOM Based XSS Software: CAE Learning Space Enterprise with Intuity License Image Version: 267r Patch Level: 639 Vulnerability: DOM Based XSS Description The CAE Learning Space Enterprise management software is vulnerable to a DOM Based XSS attack. A DOM Based XSS attack is when a...

D1rkSleep

D1rkSleep @5pider 的 EKKO 改进版本，仅加密映像节区。 使用 CreateTimerQueueTimer Win32 API 的睡眠混淆技术。 致谢： https://github.com/Cracked5pider/Ekko...

REpsych

REpsych : リバースエンジニアリングにおける心理戦 github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax 概要 REpsych ツールセットは、プログラムの制御フローグラフ CFG を通じて画像を生成することを示す概念実証です。 一般的な関数の CFG| REpsych で生成された CFG ---|--- | このプロジェクトには特別な目的はありません（できることを示す以外には）が、可能な（非真面目な）応用例は DEF CON プレゼンテーション で概説されています。 このプログラムは、テストされたすべてのバージョン...

REpsych

REpsych : リバースエンジニアリングにおける心理戦 github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax 概要 REpsych ツールセットは、プログラムの制御フローグラフ（CFG）を通じて画像を生成することを示す概念実証です。 典型的な関数のCFG| REpsychが生成したCFG ---|--- | このプロジェクトに特定の目的はありません（できることを示す以外には）が、可能性のある（真面目ではない）応用例はDEF CON プレゼンテーションで概説されています。 このプログラムは、テストされたすべてのバージョンの...

screenscrub

screenscrub Find credentials in screenshots, extract them to a secret manager, and irreversibly redact them from the images — so secrets don't rot in your notes, screenshots, and /Desktop. Local. Offline. Silent. No network, no telemetry by default. screenscrub bridges two existing tool categorie...

CVE-2026-20896

CVE-2026-20896: Gitea Dockerイメージ認証バイパスPoC !WARNING このPoCはローカルラボ、または明示的にテストを許可されたシステムに対してのみ使用してください。 https://github.com/user-attachments/assets/b73af2fe-0e59-438b-80d6-be93fd75697b 概要 CVE-2026-20896 は、影響を受ける公式Gitea Dockerイメージにおける認証バイパスです。リバースプロキシ認証が有効な場合、イメージが生成する REVERSEPROXYTRUSTEDPROXIES =...

CVE-2026-104861

A flaw was found in probe-image-size. An unauthenticated remote attacker can exploit this vulnerability to cause a Denial of Service DoS by supplying specially crafted Scalable Vector Graphics SVG input. Due to inefficient pattern matching and input handling during SVG parsing, processing unclose...

WordPress Twenty20 Image Before-After plugin <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Twenty20 Image Before-After versions = 2.0.5...

CVE-2024-36057

CVE-2024-36057 — Koha Library Software CVE ID: CVE-2024-36057 製品: Koha Library Software 脆弱性タイプ: OSコマンドインジェクション CWE-78 CVSSスコア: 8.7 高 認証済み 影響を受けるバージョン: 22.05.22未満 クレジット: Karolis Narvilas 説明...

EUVD-2026-91768

probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parsesync/svg.js and lib/parsestream/svg.js use the searching regular expression //, which repeatedly scans to the end of input when attacker-controlled data contains many less-than characters without ...

CVE-2026-104861 probe-image-size: Quadratic-time Denial of Service in the SVG Parser

probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parsesync/svg.js and lib/parsestream/svg.js use the searching regular expression //, which repeatedly scans to the end of input when attacker-controlled data contains many less-than characters without ...

CVE-2026-104861 probe-image-size: Quadratic-time Denial of Service in the SVG Parser

probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parsesync/svg.js and lib/parsestream/svg.js use the searching regular expression //, which repeatedly scans to the end of input when attacker-controlled data contains many less-than characters without ...

CVE-2026-94483

A flaw was found in Next.js Image Optimization, which can lead to information disclosure via Server-Side Request Forgery SSRF. In configurations where remote image optimization is enabled with host allowlists, the application can follow attacker-controlled Domain Name System DNS resolution after...

CVE-2026-94483

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the optimized image fetch to reach private IP addresses after the URL...

CVE-2026-103648

Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination directory...

CVE-2021-22205

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

CVE-2026-103648 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader

Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination directory...