php-jpeg-injector

php-jpeg-injector Injects php payloads into jpeg images. Related to this post. Use Case You have a web application that runs a jpeg image through PHP's GD graphics library. Description This script injects PHP code into a specified jpeg image. The web application will execute the payload if it...

[SECURITY] Fedora 45 Update: perl-GD-SecurityImage-1.75-24.fc45

This module gives you a basic interface to create "security images". Most internet software use these in their registration screens to block robot programs which may register tons of fake member accounts. This module gives you a basic interface to create such an image...

CVE-2022-31630---Proof-of-Concept-Exploit-untuk-PHP-7.4.33

CVE-2022-31630 - Proof of Concept Exploit for PHP 7.4.33 Warning: This code is created solely for educational purposes and testing in an isolated laboratory environment. Use on other systems without authorization is illegal and irresponsible. 📋 Description CVE-2022-31630 is an Out-of-Bounds OOB...

CLEANSTART-2024-ZW00851 gdImageColorMatch in gd_color_match

Security vulnerability affects the gd package. gdImageColorMatch in gdcolormatch...

CLEANSTART-2024-DP49787 gd_gif_in

Security vulnerability affects the gd package. gdgifin...

CLEANSTART-2024-AB89473 In the GD Graphics Library (aka LibGD) through 2

Security vulnerability affects the gd package. In the GD Graphics Library aka LibGD through 2...

CLEANSTART-2024-BP29926 gdImageClone in gd

Security vulnerability affects the gd package. gdImageClone in gd...

CLEANSTART-2024-BA53680 When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2

Security vulnerability affects the gd package. When using the gdImageCreateFromXbm function in the GD Graphics Library aka LibGD 2...

CLEANSTART-2024-TR99974 read_header_tga in gd_tga

Security vulnerability affects the gd package. readheadertga in gdtga...

php-exploit_cve-2022-31630

CVE-2022-31630 – Proof of Concept Exploit Warning: This code is made only for educational purposes and testing in an isolated laboratory environment. Use on other systems without permission is illegal and irresponsible. 📌 Description CVE-2022-31630 is an Out-of-Bounds OOB Read vulnerability in th...

CVE-2026-65650

CVE-2026-65650 — PoC: Authenticated DoS in Elgg Avatar Upload Authenticated denial of service in Elgg's avatar upload feature via unbounded image dimensions, causing GD memory exhaustion. Affected: Elgg saveIconFromUploadedFile'avatar' return elggerrorresponseelggecho'avatar:resize:fail'; PHP's G...

Fedora 45 : perl-GD-SecurityImage (2026-825527e021)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-825527e021 advisory. Until now, GD::SecurityImage used Perl's built-in rand function to generate secrets. The rand function is unsuitable for security applications because it is...

CVE-2026-114723

A flaw was found in Roundcube Webmail. A remote attacker can cause a Denial of Service DoS by submitting a crafted image with excessively large dimensions. When thumbnail generation falls back to the GD graphics library on non-Windows platforms, available-memory checks are not enforced. This allo...

FreeBSD : p5-GD -- OS command injection (2b47c440-d2c0-11f1-97dc-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2b47c440-d2c0-11f1-97dc-40b034429ecf advisory. GD project reports: Fix CVE-2026-11526, command injection via 2-arg open in makefilehandle. CWE-78,...

SUSE CVE-2026-114723

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcubeimage falls back to GD, the available-memory check was applied only on Windows, so on other platforms a crafted image with large dimensions was...

CVE-2026-114723

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcubeimage falls back to GD, the available-memory check was applied only on Windows, so on other platforms a crafted image with large dimensions was...

CVE-2026-114723

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcubeimage falls back to GD, the available-memory check was applied only on Windows, so on other platforms a crafted image with large dimensions was...

UBUNTU-CVE-2026-114723

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcubeimage falls back to GD, the available-memory check was applied only on Windows, so on other platforms a crafted image with large dimensions was...

DEBIAN-CVE-2026-114723

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcubeimage falls back to GD, the available-memory check was applied only on Windows, so on other platforms a crafted image with large dimensions was...

CVE-2026-114723

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcubeimage falls back to GD, the available-memory check was applied only on Windows, so on other platforms a crafted image with large dimensions was...