12 matches found
CVE-2026-44019: External Control of File Name or Path
Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that acce...
EUVD-2025-14023
Malicious code in bioql PyPI...
Code-Projects Simple Photo Gallery 安全漏洞
Code-Projects Simple Photo Gallery is a simple photo gallery system from Code-Projects open source. A security vulnerability exists in Code-Projects Simple Photo Gallery version 1.0, which stems from an unlimited upload due to incorrect manipulation of the parameter fileimg in file/upload-photo.p...
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22.
...
UBUNTU-CVE-2021-39261
A crafted NTFS image can cause a heap-based buffer overflow in ntfscompressedpwrite in NTFS-3G 2021.8.22...
CVE-2021-33289
In NTFS-3G versions 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution...
Signal Messenger for Android Message Disclosure Vulnerability
Signal Messenger for Android is an instant messaging application based on the Android platform with encryption features. An information disclosure vulnerability exists in Signal Messenger version 4.24.8 for Android, which is caused by the program retaining an image in its own cache directory when...
PT-2014-8830
Name of the Vulnerable Software and Affected Versions Kunena component for Joomla! versions prior to 3.0.6 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters in the file or profile image upload functionality. This can be achieved by...
KedaiScript Shell Upload
Exploit Title: KedaiScript Remote Upload Shell Vulnerability DDate: 10-02-2012 Author: Netrondoank Software Link: www.kedaiscript.com Version: mlm10v21,mmgbinary,portal Tested on: windows 7 Contact: [email protected] E X P L O I T 1. Login As Demo...
Ajax File and Image Manager v1.0 Final Remote Code Execution
Exploit for php platform in category web applications -------------------------------------------------------------------------- Ajax File and Image Manager v1.0 Final Remote Code Execution Vulnerability -------------------------------------------------------------------------- author...........:...
CVE-2007-0551: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in cmsimple/cms.php in CMSimple 2.7 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pthfileconfig and 2 pthfileimage parameters...