Linux Distros Unpatched Vulnerability : CVE-2026-106565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check whil...

CVE-2026-106443

A flaw was found in WeasyPrint. When processing documents with external image references, the image loading mechanism passes untrusted image data to the underlying image library without restricting unsafe formats such as Encapsulated PostScript EPS. A remote attacker could provide a crafted...

MMSkillRisk

MMSkillRisk MMSkillRisk: マルチモーダルスキルが罠となったとき、エージェントは安全でいられるか? のためのコードとベンチマークデータ。 MMSkillRiskは、エージェントがマルチモーダルスキルに埋め込まれた悪意のある指示に抵抗しつつ、正当な視覚タスクを完了できるかを評価する。そのNative-Context Visual Attack NCVA は、スキル教示画像の中に指示を配置し、付随するスキル文書を用いてエージェントをそれらの領域へ誘導する。...

CVE-2026-103667

Gitea's container registry served blob downloads with a Content-Type taken from the media type declared in pushed image manifests, without a Content-Disposition or restrictive content security policy. A user who can push container images can publish a blob containing HTML and JavaScript with a...

CVE-2026-101154

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

nginx-cve-fix

Nginx CVE 수정 - nginx:1.25-bookworm용 소스 빌드 드롭인 공식 nginx:1.25-bookworm 이미지에 존재하는 두 개의 CVE를 수정하면서 업스트림 런타임 동작을 유지하는 소스 빌드 nginx 1.25.5 컨테이너 이미지입니다. CVE| 구성 요소| 심각도| 기법| 검증 모델 ---|---|---|---|--- CVE-2024-6119| OpenSSL / libssl3| 높음| 종속성 버전 업| 스캐너 검증 가능: dpkg 데이터베이스에서 libssl3 3.0.20 확인 가능...

EUVD-2026-93950

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

CVE-2026-101154

An authenticated remote attacker with specific permissions can perform a Path Traversal (CWE-22) attack to read or write files on the platform filesystem beyond the intended scope. This vulnerability occurs through specially crafted requests and/or crafted file uploads to the Network Provisioning...

CVE-2026-101154 Security Advisory 0189

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

CVE-2026-106063

A heap-based buffer overflow exists in the GIMP DICOM export plug-in (CWE-787). The vulnerability is triggered when exporting images with extremely large width and height dimensions, causing an integer overflow during the 32-bit calculation of the buffer size (width * height * bytes-per-pixel). C...

nginx-patch

nginx 1.15.x ベースイメージ（debian-base を使用） nginx engine x は、HTTP およびリバースプロキシサーバー、メールプロキシサーバー、そして汎用 TCP プロキシサーバーです。 このカスタム nginx イメージには以下が含まれています: ngxdevelkit set-misc-nginx-module headers-more-nginx-module nginx-http-auth-digest ngxhttpsubstitutionsfiltermodule nginx-opentracing opentracing-cpp...

CVE-2026-106111

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty ZIP or ZIPS inflate result that is shorter than the EXR block's required size. ZipExrCompression.Decompress reconstructs the returned prefix while ExrDecoderCore processes the fu...

CVE-2026-106111 ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty ZIP or ZIPS inflate result that is shorter than the EXR block's required size. ZipExrCompression.Decompress reconstructs the returned prefix while ExrDecoderCore processes the fu...

CVE-2026-106111 ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty ZIP or ZIPS inflate result that is shorter than the EXR block's required size. ZipExrCompression.Decompress reconstructs the returned prefix while ExrDecoderCore processes the fu...

CVE-2026-106111

The ImageSharp 2D graphics library (versions 4.0.0 through 4.1.2 ) is vulnerable to a memory disclosure issue in its EXR ZIP decoder. Specifically, the ExrBaseDecompressor.UndoZipCompression method can accept a ZIP or ZIPS inflate result shorter than the required block size. This causes ExrDecode...

adiskreader-secretsdump

🚩 スポンサー このプロジェクトが気に入ったら、ブラウザで動作するフルペンテストスイートである OctoPwn のライセンス購入をご検討ください。 新しいビルド/リリースやその他の情報の通知を受け取るには、私たちの Discord に参加してください。 adiskreader-secretsdump ローカルまたはリモートのディスクイメージからレジストリとNTDSのシークレットを抽出します 🚩 ブラウザで動作します このプロジェクトは、他の多くのペンテスターツールと同様に、OctoPwnの力でブラウザ上で動作します。 コミュニティ版は OctoPwn - Live でチェックしてください...

CVE-2026-45806

CVE-2026-45806 Penpot의 원격 이미지 가져오기 기능에서 인증된 파일 편집자가 일반적인 미디어 편의 기능을 백엔드 기반 SSRF로 전환할 수 있었습니다. 공격자가 제어하는 URL이 리디렉션을 따르는 서버 가져오기 경로로 들어갔지만 목적지 필터링이 없었기 때문입니다. 소개 이 문제는 Penpot오픈소스 디자인 및 코드 협업 플랫폼을 검토하던 중, 특정 질문을 염두에 두고 발견했습니다. 협업 디자인 도구에서 한 사용자가 백엔드에 원격 이미지 URL을 전달하면 어떤 일이 발생할까? 이 경우, 그 질문이 실제 버그로...

CVE-2026-79551-Tenda

CVE-2026-79551 Tenda ハードコードされた TLS 秘密鍵 CNVD ID: CNVD-2026-25884 ベンダー: Tenda Technology Co., Ltd. 製品: NVR4H ネットワークビデオレコーダー ハードウェアバージョン CH3V2.1 ファームウェア: V27.5.58.6 クラス: CWE-321 — ハードコードされた暗号鍵の使用 概要 NVR4H ファームウェアは、読み取り専用の user-x.squashfs パーティション /opt/app/ にマウント に ECDSA 鍵ペアを保存しています。秘密鍵は...

CVE-2024-7344

🐞 CVE-2024-7344: 不適切なPEイメージ読み込み このリポジトリには、UEFIシステムに影響を与えるSecure Boot回避の脆弱性であるCVE-2024-7344に関連する研究資料が含まれています。この脆弱性の技術的分析、攻撃フローのドキュメント、および管理された環境で脆弱な動作を再現するために作成された再現アプリケーションを一元管理しています。また、セキュリティ研究者がこの脆弱性に関連する技術を理解、研究、実験するのに役立つドキュメントと研究リソースも含まれています。 📑 目次 最初の発見と公式リファレンス 脆弱なバイナリ（実世界／教育用） 脆弱性の概要（分析と悪用）...

CVE-2026-7574

🚨 CVE-2026-7574 — Claude Desktop Cowork VM 무결성 우회 Anthropic Claude Desktop Cowork VM 이미지 무결성 우회 🔥 VM 이미지 변조를 통한 로컬 지속성 VM 파일시스템 이미지rootfs.img 수정을 허용하는 무결성 검증 취약점으로, VM 환경 내에서 지속적인 코드 실행이 가능합니다. 📖 개요 CVE-2026-7574 는 Anthropic Claude Desktop Cowork 에 영향을 미치는 높은 심각도의 취약점입니다. 이 문제는 애플리케이션이 VM을 부팅하기 전...