Dropper

Stealth dropper JPEG/PNG This project is a tool for embedding payloads into JPG/PNG format images, allowing you to perform certain actions when opening them. 🚫 Disclaimer This repository is provided for educational purposes only and intended for authorized security research. Use of these material...

CVE-2026-7311: Improper Limitation of a Pathname to a Restricted Directory

The TinyPNG – JPEG, PNG & WebP image compression plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteconvertedimagesize function in all versions up to, and including, 3.6.13. This makes it possible for authenticated attackers, with...