CVE-2026-44019: External Control of File Name or Path

Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that acce...

EUVD-2025-14023

Malicious code in bioql PyPI...

Code-Projects Simple Photo Gallery 安全漏洞

Code-Projects Simple Photo Gallery is a simple photo gallery system from Code-Projects open source. A security vulnerability exists in Code-Projects Simple Photo Gallery version 1.0, which stems from an unlimited upload due to incorrect manipulation of the parameter fileimg in file/upload-photo.p...

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22.

...

UBUNTU-CVE-2021-39261

A crafted NTFS image can cause a heap-based buffer overflow in ntfscompressedpwrite in NTFS-3G 2021.8.22...

CVE-2021-33289

In NTFS-3G versions 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution...

Signal Messenger for Android Message Disclosure Vulnerability

Signal Messenger for Android is an instant messaging application based on the Android platform with encryption features. An information disclosure vulnerability exists in Signal Messenger version 4.24.8 for Android, which is caused by the program retaining an image in its own cache directory when...

KedaiScript Shell Upload

Exploit Title: KedaiScript Remote Upload Shell Vulnerability DDate: 10-02-2012 Author: Netrondoank Software Link: www.kedaiscript.com Version: mlm10v21,mmgbinary,portal Tested on: windows 7 Contact: [email protected] E X P L O I T 1. Login As Demo...

Ajax File and Image Manager v1.0 Final Remote Code Execution

Exploit for php platform in category web applications -------------------------------------------------------------------------- Ajax File and Image Manager v1.0 Final Remote Code Execution Vulnerability -------------------------------------------------------------------------- author...........:...