📄 Packet Storm EXIF Data Disclosure

A bad code push allowed EXIF data to remain in some photos on Packet Storm. Our analysis shows only 0.004% of uploaded pictures were affected and they have all been stripped to ensure no further exposure. Fortunately, the affected pictures only include items related to an admin of the site and th...

EUVD-2021-16101

Malware in sbrugna...

EUVD-2015-5885

Malware in sbrugna...

EUVD-2021-24176

Malware in sbrugna...

EUVD-2015-5881

Malware in sbrugna...

EUVD-2021-24178

Malware in sbrugna...

EUVD-2021-16080

Malware in sbrugna...

EUVD-2025-26206

Malicious code in bioql PyPI...

EUVD-2024-0057

Malicious code in bioql PyPI...

EUVD-2023-0077

Malicious code in bioql PyPI...

EUVD-2025-4463

Malicious code in bioql PyPI...

EUVD-2023-30274

Malicious code in bioql PyPI...

EUVD-2025-10405

Malicious code in bioql PyPI...

RLSA-2025:7457 Moderate: exiv2 security update

Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats. Security Fixes: exiv2: Use After Free in Exiv...

exiv2 security update

An update is available for exiv2. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Exiv2 is a C++ library to access image metadata, supporting read and write...

Exploit for Out-of-bounds Write in Apple Ipados

CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corrupti...

CVE-2025-57292

Todoist v8484 contains a stored cross-site scripting XSS vulnerability in the avatar upload functionality. The application fails to properly validate the MIME type and sanitize image metadata...

CVE-2025-57292

Todoist v8484 contains a stored cross-site scripting XSS vulnerability in the avatar upload functionality. The application fails to properly validate the MIME type and sanitize image metadata...

CVE-2025-57292

CVE-2025-57292 affects Todoist v8484, with a stored cross-site scripting (XSS) flaw in the avatar upload feature. The root cause is improper MIME-type validation and insufficient sanitization of image metadata, enabling script execution through uploaded avatars. Public references from multiple so...

PT-2025-39648

Name of the Vulnerable Software and Affected Versions Todoist version 8484 Description The application does not properly validate the MIME type and sanitize image metadata during avatar uploads, leading to a stored cross-site scripting issue. This allows for the execution of malicious scripts...