Linux Distros Unpatched Vulnerability : CVE-2026-106565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check whil...

CVE-2026-42617

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...

PT-2026-107462

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Retrieve Embedded Sensitive Data.This issue affects Modula Image Gallery: from n/a through 3.0.11...

CVE-2026-106443

A flaw was found in WeasyPrint. When processing documents with external image references, the image loading mechanism passes untrusted image data to the underlying image library without restricting unsafe formats such as Encapsulated PostScript EPS. A remote attacker could provide a crafted...

MMSkillRisk

MMSkillRisk MMSkillRisk: Can Agents Stay Safe When Multimodal Skills Become Traps? के लिए कोड और बेंचमार्क डेटा MMSkillRisk मूल्यांकन करता है कि क्या एजेंट वैध दृश्य कार्यों को पूरा कर सकते हैं, जबकि मल्टीमॉडल कौशलों में एम्बेड किए गए दुर्भावनापूर्ण निर्देशों का प्रतिरोध करते हैं। इसका...

CVE-2026-103667

Gitea's container registry served blob downloads with a Content-Type taken from the media type declared in pushed image manifests, without a Content-Disposition or restrictive content security policy. A user who can push container images can publish a blob containing HTML and JavaScript with a...

CVE-2026-101154

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

nginx-cve-fix

Nginx CVE Fix - nginx:1.25-bookworm के लिए स्रोत-निर्मित ड्रॉप-इन एक स्रोत-निर्मित nginx 1.25.5 कंटेनर इमेज जो आधिकारिक nginx:1.25-bookworm इमेज में मौजूद दो CVEs को ठीक करता है, जबकि अपस्ट्रीम रनटाइम व्यवहार को संरक्षित रखता है। CVE| Component| Severity| Technique| Verification model...

CVE-2026-101154 Security Advisory 0189

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

CVE-2026-101154

An authenticated remote attacker with specific permissions can perform a Path Traversal (CWE-22) attack to read or write files on the platform filesystem beyond the intended scope. This vulnerability occurs through specially crafted requests and/or crafted file uploads to the Network Provisioning...

EUVD-2026-93950

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

CVE-2026-106063

A heap-based buffer overflow exists in the GIMP DICOM export plug-in (CWE-787). The vulnerability is triggered when exporting images with extremely large width and height dimensions, causing an integer overflow during the 32-bit calculation of the buffer size (width * height * bytes-per-pixel). C...

nginx-patch

nginx 1.15.x बेस इमेज जो debian-base का उपयोग करती है nginx engine x एक HTTP और रिवर्स प्रॉक्सी सर्वर, एक मेल प्रॉक्सी सर्वर, और एक सामान्य TCP प्रॉक्सी सर्वर है। इस कस्टम nginx इमेज में शामिल हैं: ngxdevelkit set-misc-nginx-module headers-more-nginx-module nginx-http-auth-digest...

CVE-2026-106111

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty ZIP or ZIPS inflate result that is shorter than the EXR block's required size. ZipExrCompression.Decompress reconstructs the returned prefix while ExrDecoderCore processes the fu...

CVE-2026-106111 ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty ZIP or ZIPS inflate result that is shorter than the EXR block's required size. ZipExrCompression.Decompress reconstructs the returned prefix while ExrDecoderCore processes the fu...

CVE-2026-106111 ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty ZIP or ZIPS inflate result that is shorter than the EXR block's required size. ZipExrCompression.Decompress reconstructs the returned prefix while ExrDecoderCore processes the fu...

CVE-2026-106111

The ImageSharp 2D graphics library (versions 4.0.0 through 4.1.2 ) is vulnerable to a memory disclosure issue in its EXR ZIP decoder. Specifically, the ExrBaseDecompressor.UndoZipCompression method can accept a ZIP or ZIPS inflate result shorter than the required block size. This causes ExrDecode...

adiskreader-secretsdump

🚩 प्रायोजक अगर आपको यह प्रोजेक्ट पसंद है, तो OctoPwn के लाइसेंस खरीदने पर विचार करें, यह हमारा पूर्ण पेंटेस्टिंग सूट है जो आपके ब्राउज़र में चलता है! नए बिल्ड/रिलीज़ और अन्य जानकारी के नोटिफिकेशन के लिए, हमारे Discord पर आएं। adiskreader-secretsdump स्थानीय या दूरस्थ डिस्क इमेज से रजिस्ट्री और NT...

CVE-2026-45806

CVE-2026-45806 Penpot की रिमोट इमेज इम्पोर्ट सुविधा ने एक प्रमाणित फ़ाइल संपादक को एक सामान्य मीडिया सुविधा को बैकएंड-उत्पत्ति वाले SSRF में बदलने दिया, क्योंकि हमलावर-नियंत्रित URL बिना गंतव्य फ़िल्टरिंग के एक रीडायरेक्ट-फॉलो करने वाले सर्वर फ़ेच पथ में प्रवेश कर गए। परिचय मुझे यह दोष Penpot की...

CVE-2026-79551-Tenda

CVE-2026-79551 Tenda हार्डकोडेड TLS निजी कुंजी CNVD ID: CNVD-2026-25884 विक्रेता: Tenda Technology Co., Ltd. उत्पाद: NVR4H नेटवर्क वीडियो रिकॉर्डर हार्डवेयर संस्करण CH3V2.1 फर्मवेयर: V27.5.58.6 वर्ग: CWE-321 — हार्ड-कोडेड क्रिप्टोग्राफिक कुंजी का उपयोग अवलोकन NVR4H फर्मवेयर अपने रीड-ओनली...