CVE-2021-22204

CVE-2021-22204 Exploit para CVE-2021-22204 ExifTool - Ejecución de código arbitrario Descripción del Exploit Usa este exploit para generar un payload de imagen JPEG que puede ser utilizado con una versión vulnerable de ExifTool para ejecución de código. Se puede proporcionar un comando...

CVE-2026-66916

Password-Protected Category Bypass via JSON Format in JoomGallery JoomGallery ≤ 4.3.0-stable — Unauthenticated Attacker Bypasses Password Gate to Download Protected Images SUMMARY An unauthenticated access control bypass exists in JoomGallery's category JSON view. When a gallery category is...

android-kernel-exploitation-ashfaq-CVE-2019-2215

android-kernel-exploitation-ashfaq-CVE-2019-2215. Imagen Docker proporcionada por el usuario Robert Dan en el taller android-kernel-exploitation-ashfaq-CVE-2019-2215...

CVE-2025-8723

⚡️ Cloudflare Image Resizing Descripción: El endpoint de la API REST del plugin no autentica a los usuarios y desinfecta incorrectamente la entrada en el método hookrestpredispatch. Esta falla permite a los atacantes inyectar y ejecutar código PHP arbitrario mediante solicitudes maliciosas, sin...

CLSA-2026-1791208774 TuxCare security update for image-size (2 CVEs)

TuxCare rebuilt image-size to address 2 CVEs. Fixed in 2.0.2-tuxcare.1...

CVE-2025-47827

CVE-2025-47827 Prueba de concepto e informe de vulnerabilidad para CVE-2025-47827. Contenido Descripción Divulgación Impacto Detección Mitigación Binarios Prueba de concepto Recursos Descripción En IGEL OS anterior a v11, Secure Boot puede ser eludido porque el módulo igel-flash-driver verifica...

CVE-2025-49113

CVE-2025-49113 – Exploit RCE de Roundcube Webmail PoC en Python ID de CVE: CVE-2025-49113 Tipo de Exploit: Ejecución Remota de Código mediante Inyección de Objetos PHP Aplicación: Roundcube Webmail ≤ 1.5.9 y ≤ 1.6.10 Lenguaje del Exploit: Python Autor: 00xCanelo Estado: Probado y Funcionando en...

USN-8868-1 libreoffice vulnerabilities

It was discovered that LibreOffice incorrectly handled WMF image imports. An attacker could possibly use this issue to cause LibreOffice to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-63272 It was discovered that LibreOffice incorrectly handled PDF document import...

USN-8868-1: LibreOffice vulnerabilities

It was discovered that LibreOffice incorrectly handled WMF image imports. An attacker could possibly use this issue to cause LibreOffice to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-63272 It was discovered that LibreOffice incorrectly handled PDF document import...

CVE-2021-22204

CVE-2021-22204 Descripción La neutralización incorrecta de datos del usuario en el formato de archivo DjVu en ExifTool versiones 7.44 y posteriores permite la ejecución de código arbitrario al analizar la imagen maliciosa. Script Enlace del script Uso del script: Comando del sistema: bash...

CVE-2021-22205

Impacto de la vulnerabilidad Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones a partir de 11.9. GitLab no validaba correctamente los archivos de imagen que se pasaban a un analizador de archivos, lo que resultaba en una ejecución remota de comandos. Producto afectado...

CVE-2026-66917

IDOR + XSS persistente tramite un'autorizzazione a livello di oggetto non corretta in JoomGallery JoomGallery ≤ 4.3.0 — un utente con ruolo Editor dirotta qualsiasi immagine della galleria e memorizza un payload XSS, consentendo il dirottamento della sessione admin SOMMARIO...

BIT-MOODLE-2026-102583 Moodle: incorrect capability check in ai generate image web service

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence AI editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI...

dasel-hardened-container

dasel v3.3.1 container indurito Questo è un pacchetto melange e una immagine container apko per dasel v3.3.1 con una patch in fase di build per CVE-2026-33320 espansione illimitata degli alias YAML. L'immagine è costruita interamente da un APK prodotto localmente - non viene utilizzata alcuna...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: i2c: img-scb – fixed a reference leak when pmruntimegetsync fails. The PM reference count is not expected to be incremented upon a return from the functions imgi2cxfer and imgi2cinit. However, pmruntimegetsync will still incremen...

Astra Linux – Vulnerability in ffmpeg5

The Ffmpeg v.N113007-g8d24a28d06 contains a buffer overflow vulnerability that allows a local attacker to execute arbitrary code through libavutil/imgutils.c:353:9 in the imagecopyplane function...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick version 7.0.11. In this version, an integer overflow in the WriteTHUMBNAILImage function in the coders/thumbnail.c file may lead to undefined behavior when processing a specially crafted image file submitted by an attacker. The greatest threat posed by this...

Astra Linux – Vulnerability in libstb

stbimage is a single-file library licensed under MIT that is used for processing images. When stbisetflipverticallyonload is set to TRUE, and reqcomp is set to a value that does not match the actual number of components per pixel, the library attempts to flip the image vertically. A specially...

Astra Linux – Vulnerability in Zabbix

A verified Zabbix user including guests can cause excessive CPU load on the webserver by sending specially crafted parameters to /imgstore.php, potentially leading to a denial of service...

Astra Linux – Vulnerability in openexr

A flaw was discovered in OpenEXR’s TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image file to have it processed by OpenEXR, resulting in a floating-point exception error. The greatest threat posed by this vulnerability is to system availabili...