Linux Distros Unpatched Vulnerability : CVE-2026-106565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check whil...

CVE-2026-42617

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...

PT-2026-107462

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Retrieve Embedded Sensitive Data.This issue affects Modula Image Gallery: from n/a through 3.0.11...

CVE-2026-106443

A flaw was found in WeasyPrint. When processing documents with external image references, the image loading mechanism passes untrusted image data to the underlying image library without restricting unsafe formats such as Encapsulated PostScript EPS. A remote attacker could provide a crafted...

MMSkillRisk

MMSkillRisk Code et données de benchmark pour MMSkillRisk : Les agents peuvent-ils rester sûrs lorsque les compétences multimodales deviennent des pièges ? MMSkillRisk évalue si les agents peuvent accomplir des tâches visuelles légitimes tout en résistant à des instructions malveillantes intégrée...

CVE-2026-103667

Gitea's container registry served blob downloads with a Content-Type taken from the media type declared in pushed image manifests, without a Content-Disposition or restrictive content security policy. A user who can push container images can publish a blob containing HTML and JavaScript with a...

CVE-2026-101154

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

nginx-cve-fix

إصلاح ثغرات Nginx - بديل مبني من المصدر لـ nginx:1.25-bookworm صورة حاوية nginx 1.25.5 مبنية من المصدر تعالج ثغرتين موجودتين في الصورة الرسمية nginx:1.25-bookworm مع الحفاظ على سلوك وقت التشغيل الأصلي. CVE| المكون| الخطورة| التقنية| نموذج التحقق ---|---|---|---|--- CVE-2024-6119| OpenSSL / libssl...

CVE-2026-101154 Security Advisory 0189

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

CVE-2026-101154

An authenticated remote attacker with specific permissions can perform a Path Traversal (CWE-22) attack to read or write files on the platform filesystem beyond the intended scope. This vulnerability occurs through specially crafted requests and/or crafted file uploads to the Network Provisioning...

EUVD-2026-93950

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

CVE-2026-106063

A heap-based buffer overflow exists in the GIMP DICOM export plug-in (CWE-787). The vulnerability is triggered when exporting images with extremely large width and height dimensions, causing an integer overflow during the 32-bit calculation of the buffer size (width * height * bytes-per-pixel). C...

nginx-patch

صورة قاعدة nginx 1.15.x باستخدام debian-base nginx engine x هو خادم HTTP ووكيل عكسي، وخادم وكيل بريد، وخادم وكيل TCP عام. تحتوي صورة nginx المخصصة هذه على: ngxdevelkit set-misc-nginx-module headers-more-nginx-module nginx-http-auth-digest ngxhttpsubstitutionsfiltermodule nginx-opentracing...

CVE-2026-106111

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty ZIP or ZIPS inflate result that is shorter than the EXR block's required size. ZipExrCompression.Decompress reconstructs the returned prefix while ExrDecoderCore processes the fu...

CVE-2026-106111 ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty ZIP or ZIPS inflate result that is shorter than the EXR block's required size. ZipExrCompression.Decompress reconstructs the returned prefix while ExrDecoderCore processes the fu...

CVE-2026-106111 ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty ZIP or ZIPS inflate result that is shorter than the EXR block's required size. ZipExrCompression.Decompress reconstructs the returned prefix while ExrDecoderCore processes the fu...

CVE-2026-106111

The ImageSharp 2D graphics library (versions 4.0.0 through 4.1.2 ) is vulnerable to a memory disclosure issue in its EXR ZIP decoder. Specifically, the ExrBaseDecompressor.UndoZipCompression method can accept a ZIP or ZIPS inflate result shorter than the required block size. This causes ExrDecode...

adiskreader-secretsdump

🚩 الرعاة إذا أعجبك هذا المشروع، فكر في شراء تراخيص OctoPwn، مجموعتنا الكاملة لاختبار الاختراق التي تعمل في متصفحك! للإشعارات حول الإصدارات الجديدة والمعلومات الأخرى، انضم إلى Discord adiskreader-secretsdump استخراج أسرار الريجستري و NTDS من صور الأقراص المحلية أو البعيدة 🚩 يعمل في المتصفح يعمل هذ...

CVE-2026-45806

CVE-2026-45806 La fonction d'importation d'images distantes de Penpot permettait à un éditeur de fichier authentifié de transformer une fonctionnalité multimédia normale en SSRF d'origine serveur, car des URL contrôlées par l'attaquant tombaient dans un chemin de récupération serveur suivant les...

CVE-2026-79551-Tenda

CVE-2026-79551 Clé privée TLS codée en dur Tenda ID CNVD : CNVD-2026-25884 Fournisseur : Tenda Technology Co., Ltd. Produit : Enregistreur vidéo réseau NVR4H version matérielle CH3V2.1 Micrologiciel : V27.5.58.6 Classe : CWE-321 — Utilisation d'une clé cryptographique codée en dur Aperçu Le...