Lucene search
+L

181 matches found

EUVD
EUVD
added 2025/10/03 8:07 p.m.7 views

EUVD-2025-31764

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00324EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2025-25815

Malicious code in bioql PyPI...

7.5CVSS6.2AI score0.00912EPSS
SaveExploits1References6
OSV
OSV
added 2025/09/30 6:30 p.m.7 views

GHSA-9965-VMPH-33XX validator.js has a URL validation bypass vulnerability in its isURL function

A URL validation bypass vulnerability exists in validator.js prior to version 13.15.20. The isURL function uses '://' as a delimiter to parse protocols, while browsers use ':' as the delimiter. This parsing difference allows attackers to bypass protocol and domain validation by crafting URLs...

6.1CVSS6.1AI score0.00324EPSS
SaveExploits1References9
OSV
OSV
added 2025/09/30 6:15 p.m.7 views

UBUNTU-CVE-2025-56200

A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL function uses '://' as a delimiter to parse protocols, while browsers use ':' as the delimiter. This parsing difference allows attackers to bypass protocol and domain validation by crafting URLs leadi...

6.1CVSS6.7AI score0.00324EPSS
SaveExploits1References2
GithubExploit
GithubExploit
added 2025/09/30 2:23 p.m.478 views

Exploit for OS Command Injection in Vsftpd_Project Vsftpd

vsFTPd 2.3.4 백도어 취약점CVE-2011-2523 재현 취약점 정보 CVE-2011-2...

10CVSS7.1AI score0.96184EPSS
SaveExploits49
Veracode
Veracode
added 2025/09/23 10:17 a.m.18 views

Denial Of Service (DoS)

ImageMagick is vulnerable to Denial of Service. The vulnerability is due to improper handling of geometry strings containing only a colon ":", which sets width/height to zero and leads to a divide-by-zero error, which allows an attacker to crash the application via a crafted input...

7.5CVSS6.7AI score0.00912EPSS
SaveExploits1References8Affected Software19
RedHat Linux
RedHat Linux
added 2025/09/11 12:00 p.m.12 views

php: Streams HTTP wrapper does not fail for headers with invalid name and no colon

A flaw was found in PHP. This vulnerability allows applications to accept invalid headers via malformed HTTP headers missing a colon :, which may confuse applications into processing them as valid headers...

6.3CVSS5.7AI score0.00484EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/09/03 12:08 a.m.8 views

CVE-2025-55212

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon ":" to montage -geometry leads GetGeometry to set width/height to 0. Later, ThumbnailImage divides by these zer...

7.5CVSS6.3AI score0.00912EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-55212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry strin...

7.5CVSS7AI score0.00912EPSS
SaveExploits1References3
CloudLinux
CloudLinux
added 2025/08/29 4:13 p.m.22 views

php: Fix of 3 CVEs

CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation...

9.8CVSS7AI score0.00825EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2019-20041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wpksesbadprotocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as...

9.8CVSS7.2AI score0.04654EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2025/08/26 11:22 p.m.9 views

SUSE CVE-2025-55212

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon ":" to montage -geometry leads GetGeometry to set width/height to 0. Later, ThumbnailImage divides by these zer...

4.7CVSS6.7AI score0.00912EPSS
SaveExploits1References9
OSV
OSV
added 2025/08/26 5:15 p.m.1 views

DEBIAN-CVE-2025-55212

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon ":" to montage -geometry leads GetGeometry to set width/height to 0. Later, ThumbnailImage divides by these zer...

7.5CVSS7.2AI score0.00912EPSS
SaveExploits1References1
NVD
NVD
added 2025/08/26 5:15 p.m.8 views

CVE-2025-55212

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon ":" to montage -geometry leads GetGeometry to set width/height to 0. Later, ThumbnailImage divides by these zer...

7.5CVSS0.00912EPSS
SaveExploits1References6
OSV
OSV
added 2025/08/26 5:15 p.m.19 views

UBUNTU-CVE-2025-55212

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon ":" to montage -geometry leads GetGeometry to set width/height to 0. Later, ThumbnailImage divides by these zer...

7.5CVSS5.7AI score0.00912EPSS
SaveExploits1References11
Debian CVE
Debian CVE
added 2025/08/26 4:43 p.m.9 views

CVE-2025-55212

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon ":" to montage -geometry leads GetGeometry to set width/height to 0. Later, ThumbnailImage divides by these zer...

7.5CVSS7.2AI score0.00912EPSS
SaveExploits1
OSV
OSV
added 2025/08/26 4:43 p.m.7 views

CVE-2025-55212 ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon ":" to montage -geometry leads GetGeometry to set width/height to 0. Later, ThumbnailImage divides by these zer...

3.7CVSS6.2AI score
SaveExploits0References8
OSV
OSV
added 2025/08/26 3:27 p.m.4 views

GHSA-FH55-Q5PJ-PXGW ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash

Summary Passing a geometry string containing only a colon ":" to montage -geometry leads GetGeometry to set width/height to 0. Later, ThumbnailImage divides by these zero dimensions, triggering a crash SIGFPE/abort, resulting in a denial of service. Details Root Cause 1. montage -geometry ":"...

3.7CVSS7AI score0.00912EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
added 2025/08/26 3:27 p.m.10 views

ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash

Summary Passing a geometry string containing only a colon ":" to montage -geometry leads GetGeometry to set width/height to 0. Later, ThumbnailImage divides by these zero dimensions, triggering a crash SIGFPE/abort, resulting in a denial of service. Details Root Cause 1. montage -geometry ":"...

7.5CVSS6.2AI score0.00912EPSS
SaveExploits1References8Affected Software18
Positive Technologies
Positive Technologies
added 2025/08/26 12:00 a.m.6 views

PT-2025-34795

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.13-28 ImageMagick versions prior to 7.1.2-2 Description: ImageMagick is free and open-source software used for editing and manipulating digital images. Passing a geometry string containing only a colon ":" to...

9.8CVSS6.3AI score0.04389EPSS
SaveExploits10References76
Rows per page
Query Builder