3112 matches found
CVE-2021-22205
CVE-2021-22205 Description - POC for CVE-2021-22205: Gitlab CE/EE RCE 未授权远程代码执行漏洞 POC && EXP - create by antx at 2021-10-29. Detail - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file...
CVE-2021-22205
CVE-2021-22205 GitLab fails to properly verify image files passed to the file parser, leading to command execution. An attacker can craft malicious requests to exploit this vulnerability and execute arbitrary commands on the target system, ultimately taking control of the GitLab server. Since mos...
CVE-2021-22205-gitlab
Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...
Exploit for CVE-2026-112900
Python Pillow Critical RCE Flaw CVE-20...
CVE-2021-22205
CVE-2021-22205 GitLab CE/EE Preauth RCE using ExifTool This project is for learning only, if someone's rights have been violated, please contact me to remove the project, and the lastDO NOT USE IT ILLEGALLY If you have any illegal behavior in the process of using this tool, you will bear all the...
CVE-2021-22205
Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...
CVE-2021-22205
Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...
CVE-2026-114112
A flaw was found in sharp. An attacker can exploit this vulnerability by submitting specially crafted AV1 Image File Format AVIF or High-Efficiency Image File Format HEIF images to applications processing untrusted media. Due to memory corruption during image decoding in a bundled library,...
LogoFail-PoC
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ BIOS Image Parser...
Debian dsa-6523 : heif-gdk-pixbuf - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6523 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6523-1 [email protected] https://www.debian.org/securit...
GitLab-CVE-2021-22205-
Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Affected Version Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...
CVE-2021-22205
Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE /tmp/1.txt" batch scan python3...
Astra Linux – Vulnerability in libjpeg-turbo
Libjpeg-turbo 1.5.2 has a NULL Pointer Dereference issue in files jdpostct.c and jquant1.c, due to a malicious JPEG file...
Astra Linux – Vulnerability in exiv2
In Exiv2 versions 0.27.1, an uncontrolled memory allocation for PngChunk::parseChunkContent allows an attacker to cause a denial of service crash due to a std::badalloc exception through a crafted PNG image file...
CVE-2026-85824
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...
CVE-2026-85823
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...
CVE-2026-85823
A Use after free vulnerability in the Windows Composite Image File System allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.0 (High) . While the documentation confirms the existence of an official fix, specific details r...
CVE-2026-85824
A Use after free vulnerability exists in the Windows Composite Image File System . This flaw allows an authorized attacker to perform a local privilege escalation . While the vulnerability is confirmed, specific technical details regarding the root cause or affected components are not provided in...
