CVE-2019-1010174

CVE-2019-1010174 CImg Library v.2.3.3 - 命令注入 CVE-2019-1010174 详情 已修改 此漏洞自 NVD 上次分析以来已被修改。它正在等待重新分析，这可能会导致所提供的信息发生进一步变化。 描述 CImg：CImg 库 v.2.3.3 及更早版本受影响：命令注入。影响：RCE。攻击向量：从用户可控的 URL 加载图像可导致命令注入，因为未对 URL 进行字符串清理。修复版本：v.2.3.4。...

CVE-2026-33626-Lab

CVE-2026-33626 — LMDeploy 视觉语言 SSRF 实验环境 概述 本仓库重现了 CVE-2026-33626 ，即 LMDeploy 视觉语言图像加载路径中的服务器端请求伪造（SSRF）漏洞。 漏洞行为发生在 LMDeploy 接收图像 URL 时，服务器端图像加载器在不正确阻止内部、私有、回环或链路本地地址的情况下直接获取该 URL。 本实验环境对比： 服务| 版本| 用途 ---|---|--- vuln| LMDeploy 0.12.0| 展示存在漏洞的行为 patched| LMDeploy 0.12.3| 展示修复后的行为 internal| 本地金丝雀服...

cve-2022-39197

cve-2022-39197 現在、リモート画像のみ読み込めます。...

S5Late

S5Late 有线（Tethered）iPod bootrom/DFU 漏洞利用。 目前仅支持 Nano 7G，若要支持 Nano 6G，需要更新偏移量。 运行 将你的 iPod 置于 DFU 模式。 然后运行： root@kitploit: ./S5Late hax 2024-12-15T23:11:34Z INFO S5Late We found an Apple Device in DFU mode. 2024-12-15T23:11:34Z INFO S5Late Succesfully exploited the device!...

[SECURITY] Fedora 43 Update: gdk-pixbuf2-2.44.6^really2.44.4-3.fc43

gdk-pixbuf is an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter...

CVE-2024-7344

🐞 CVE-2024-7344：不正确的 PE 镜像加载 本仓库包含与 CVE-2024-7344 相关的研究材料，这是一个影响 UEFI 系统的 Secure Boot 绕过漏洞。它集中整理了该漏洞的技术分析、攻击流程文档，以及为在受控环境中复现该漏洞行为而重新创建的应用。本仓库还包含文档和研究资源，旨在帮助安全研究人员理解、研究并实验与该漏洞相关的技术。 📑 目录 原始发现与官方参考 受影响的可执行文件（真实世界 / 教育用途） 漏洞概述（分析与利用） 📂 Secure Boot 与 Microsoft 证书 发现与侦察 根本原因分析 利用过程 受影响的软件 🧠 原始发现与官方参考...

[SECURITY] Fedora 44 Update: gdk-pixbuf2-2.44.6^really2.44.4-3.fc44

gdk-pixbuf is an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter...

PUB-A-503549684

In linkloadgnssimage of linkdevice.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

[SECURITY] Fedora 44 Update: gdk-pixbuf2-2.44.6^really2.44.4-2.fc44

gdk-pixbuf is an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter...

Fedora 43 : emacs (2026-8894da1406)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8894da1406 advisory. Fix CVE-2026-77219: Integer overflow in PBM/PPM/PGM image loader. Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2026-18444

There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI...

EUVD-2026-52804

NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47612

Summary: NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory, potentially leading to information disclosure. The CVSSv3.1 base score is 7.5 (High) with network attack vector and no ...

CVE-2026-47612

NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure...

OESA-2026-3185 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. Prior to 12.3.0, whe...

UBUNTU-CVE-2026-53501

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor’s HMAC validation can be bypassed due to the use of Python’s .replace when removing the signature from the URL before validation. Since .replace removes all occurrences of the substring, an attacker can insert...

OESA-2026-3141 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. Prior to 12.3.0,...

GHSA-F88M-G3JW-G9CJ sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591

Impact A number of vulnerabilities, two rated as "High" severity using CVSSv4, have been discovered and fixed in the upstream libvips dependency. Those processing untrusted input with versions of sharp prior to 0.35.0 are affected. Patches Using prebuilt binaries provided by sharp? Most people re...

PYSEC-2026-2607 LMDeploy has Server-Side Request Forgery (SSRF) via Vision-Language Image Loading

Summary A Server-Side Request Forgery SSRF vulnerability exists in LMDeploy's vision-language module. The loadimage function in lmdeploy/vl/utils.py fetches arbitrary URLs without validating internal/private IP addresses, allowing attackers to access cloud metadata services, internal networks, an...

CVE-2026-55380 Pillow GdImageFile decompression bomb protection bypass

Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile.open read image dimensions from the GD 2.x header and stored them in self.size without calling Image.decompressionbombcheck, allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This iss...