CVE-2023-36664

CVE-2023-36664 : Ghostscript 远程代码执行 CVE-2023-36664 的概念验证。 使用方法 将载荷插入 .eps 文件： root@kitploit: python3 poc.py -f "filename" --payload "command" python3 poc.py -f file.eps --payload firefox 将反弹 Shell 载荷插入 .eps 文件： root@kitploit: python3 poc.py -f "filename" --revshell --ip "ip" --port "port" python3...

Astra Linux – Vulnerability in ffmpeg5

It was discovered that FFmpeg version n6.1 contains a heap buffer overflow vulnerability in the drawblockrectangle function of libavfilter/vfcodecview.c. This vulnerability allows attackers to cause undefined behavior or a Denial of Service DoS attack through crafted inputs...

CVE-2025-39436

🚨 Explotación del Plugin de WordPress: CVE-2025-39436 📝 Descripción Existe una vulnerabilidad de Carga Sin Restricciones de Archivos con Tipo Peligroso en el plugin "I Draw" de WordPress. Este exploit permite a los atacantes subir archivos maliciosos sin restricción. El problema afecta a las...

Astra Linux – Vulnerability in openimageio

A denial-of-service vulnerability exists in the DDS native tile reading functionality of OpenImageIO Project versions 2.3.19.0 and 2.4.4.2. A specially crafted .dds file can lead to a denial-of-service attack. An attacker can provide a malicious file that triggers this vulnerability...

Astra Linux – Vulnerability in Firefox and Thunderbird

Drivers are not always robust against extremely large draw calls, and in some cases, this scenario could lead to crashes. This vulnerability affects Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1...

The vulnerability of the draw-unpack.c component in the MuPDf PDF viewer program allows a hacker to cause a service failure.

The vulnerability of the draw-unpack.c component in the MuPDf PDF viewer program is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-77074

n8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit Image node's Draw Text operation that allows authenticated users to inject MVG primitives. Attackers can craft malicious text values to issue blind outbound HTTP requests to arbitrary addresses or access...

CVE-2026-77074 n8n before 1.123.69 SSRF via Edit Image Node

n8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit Image node's Draw Text operation that allows authenticated users to inject MVG primitives. Attackers can craft malicious text values to issue blind outbound HTTP requests to arbitrary addresses or access...

CVE-2026-77074

n8n versions before 1.123.69 contain a server-side request forgery (SSRF) vulnerability in the Edit Image node's Draw Text operation . Authenticated users can inject MVG primitives through crafted text values, enabling blind outbound HTTP requests to arbitrary addresses or access to local files. ...

CVE-2026-77074 n8n before 1.123.69 SSRF via Edit Image Node

n8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit Image node's Draw Text operation that allows authenticated users to inject MVG primitives. Attackers can craft malicious text values to issue blind outbound HTTP requests to arbitrary addresses or access...

CVE-2026-74444

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate DRAWPRIMITIVES header size before division vmwcmddraw computes maxnum = header-size - sizeofcmd-body / sizeofdecl; where header-size is u32 and is taken straight from the user-supplied command stream. When...

PT-2026-72896

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate DRAW PRIMITIVES header size before division vmw cmd draw computes maxnum = header-size - sizeofcmd-body / sizeofdecl; where header-size is u32 and is taken straight from the user-supplied command stream. When...

gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c)

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

CVE-2026-50758

Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter...

CVE-2026-50756

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component...

CVE-2026-50757

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server...

CVE-2026-50758

CVE-2026-50758 describes a Cross Site Scripting vulnerability in DayuanJiang’s next-ai-draw-io (version 0.4.13) where an attacker can remotely execute arbitrary code via the mcp parameter. Technical details across multiple trusted sources confirm the affected software and the vulnerability patter...

CVE-2026-50757

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server...

CVE-2026-50756

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component...

PT-2026-62084

Name of the Vulnerable Software and Affected Versions DayuanJiang next-ai-draw-io version 0.4.13 Description A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code. This is achieved by manipulating the mcp parameter. Recommendations At the moment, there is no...