Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.2: grafana13.2-13.2.4-0.3.hum1 aarch64, s390x, x8664 grafana13.2-13.2.4-0.3.hum1.src src Security Fixes: grafana13.2: CVE-2026-114125 CVE-2026-114126 CVE-2026-111755 CVE-2026-111756...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.8-0.4.hum1 aarch64, s390x, x8664 grafana13.1-13.1.8-0.4.hum1.src src Security Fixes: grafana13.1: CVE-2026-114125 CVE-2026-114126 CVE-2026-111755 CVE-2026-111756...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.13-0.3.hum1 aarch64, x8664 grafana12.4-12.4.13-0.3.hum1.src src Security Fixes: grafana12.4: CVE-2026-114126 CVE-2026-114125 CVE-2026-111756 CVE-2026-111755...

CVE-2026-50787

The software e-SIC Livre (esiclivre) versions v0.2.2 and earlier is vulnerable to an uncontrolled resource consumption vulnerability in the restrito/inc/captcha.php component. The root cause is a lack of input validation on the GET parameters l (width), a (height), tf (font size), and ql (charact...

VulApps

VulApps http://vulapps.evalbug.com/ Collects various vulnerability environments and, for ease of use, uniformly uses the Dockerfile format. Security tool environments are also collected. If you like it, please Star it. If you don't plan to contribute, don't Fork it. This project's GitHub...

cve-images

cve-images — intentionally vulnerable lab images A collection of deliberately vulnerable Docker images for security study in an isolated lab. Started as nginx CVE reproductions and is growing into a broader set of vulnerable-by-design images e.g. DVWA. ⚠️ Safety These images are vulnerable on...

openclarity

OpenClarity is an open source tool for agentless detection and management of Virtual Machine Software Bill Of Materials SBOM and security threats such as vulnerabilities, exploits, malware, rootkits, misconfigurations and leaked secrets. Join OpenClarity's Slack channel to hear about the latest...

SUSE CVE-2026-98799

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip detached progs in trampoline images that are still in use bpftrampimageput makes sure a trampoline image is not freed while a task may still be running in it, but nothing similar is done for the progs called by that...

PIL-CVE-2017-8291

Python PIL/Pillow Remote Command Execution GhostButt / CVE-2017-8291 中文版本Chinese version Python PIL Pillow is a popular image processing library for Python. It supports various image formats and provides powerful image manipulation capabilities. The Python image processing module PIL Pillow is...

cve-2019-14206-poc

CVE-2019-14206 - Adaptive Images for WordPress Arbitrary File Deletion 📋 Index 1. About the Vulnerability 2. Prerequisites 3. Installation 4. Testing Methods Quick Test Full Test with Docker Test with Nuclei Manual Test 5. Interpreting Results 6. Cleanup 7. Troubleshooting 8. Mitigation 9. Legal...

Important: Red Hat Security Advisory: LVMS 4.12 Bug Fix and Enhancement update

Updated container images that fix multiple bugs are now available for LVMS 4.12 After a successful LVMS upgrade, the latest lvms-operator SHA image should be running. This erratum implements the following changes: - Golang version bump to address CVE-2025-68121, CVE-2026-32280, CVE-2026-33811,...

CVE-2025-69727

CVE-2025-69727 Vendor of Product INDEX-EDUCATION Affected Product Code Base PRONOTE - 202X.X.X 2025.2.8 Description An Incorrect Access Control vulnerability exists in INDEX-EDUCATION PRONOTE prior to 2025.2.8. The affected components composeUrlImgPhotoIndividu allow the construction of direct UR...

PT-2026-120948

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail sendmail::extract inline images used the media type taken from an inline image data URI without validating it, so a remote authenticated attacker could inject arbitrary MIME part...

CVE-2026-96637

A flaw was found in Pillow. When processing multi-frame SPIDER images, decompression bomb safeguards are not reapplied when navigating to subsequent frames that declare excessively large dimensions. A remote attacker could exploit this vulnerability by providing a specially crafted image file,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: brotli: brotli-1.2.1-0.1.hum1 aarch64, s390x, x8664 brotli-devel-1.2.1-0.1.hum1 aarch64, s390x, x8664 libbrotli-1.2.1-0.1.hum1 aarch64, s390x, x8664 python3-brotli-1.2.1-0.1.hum1 aarch64, s390x,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: php: php-8.5.12-1.hum1 aarch64, s390x, x8664 php-bcmath-8.5.12-1.hum1 aarch64, s390x, x8664 php-cli-8.5.12-1.hum1 aarch64, s390x, x8664 php-common-8.5.12-1.hum1 aarch64, s390x, x8664...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: bind: bind-9.20.30-0.1.hum1 aarch64, s390x, x8664 bind-chroot-9.20.30-0.1.hum1 aarch64, s390x, x8664 bind-devel-9.20.30-0.1.hum1 aarch64, s390x, x8664 bind-dnssec-utils-9.20.30-0.1.hum1 aarch64,...

CVE-2026-114491

The pdfmake library (versions 0.3.8 before 0.3.12 ) contains a vulnerability where it fails to apply the setLocalAccessPolicy() restriction to images referenced within SVG content. This flaw allows an attacker providing a document definition to include an SVG image with an href pointing to a loca...

CVE-2026-114491 pdfmake 0.3.8 before 0.3.12 Local File Policy Bypass via SVG Images

pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy restriction to images referenced inside SVG content, allowing attackers to read blocked local files. Attackers supplying a document definition can add an SVG image href pointing to a local path, embedding restricted file contents...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: spire1.15: spire1.15-1.15.5-0.2.hum1 aarch64, s390x, x8664 spire1.15-agent-1.15.5-0.2.hum1 aarch64, s390x, x8664 spire1.15-oidc-discovery-provider-1.15.5-0.2.hum1 aarch64, s390x, x8664...