2356 matches found
php-jpeg-injector
php-jpeg-injector Injects php payloads into jpeg images. Related to this post. Use Case You have a web application that runs a jpeg image through PHP's GD graphics library. Description This script injects PHP code into a specified jpeg image. The web application will execute the payload if it...
php-exploit_cve-2022-31630
CVE-2022-31630 – Proof of Concept Exploit Warning: This code is made only for educational purposes and testing in an isolated laboratory environment. Use on other systems without permission is illegal and irresponsible. 📌 Description CVE-2022-31630 is an Out-of-Bounds OOB Read vulnerability in th...
CVE-2022-31630---Proof-of-Concept-Exploit-untuk-PHP-7.4.33
CVE-2022-31630 - Proof of Concept Exploit for PHP 7.4.33 Warning: This code is created solely for educational purposes and testing in an isolated laboratory environment. Use on other systems without authorization is illegal and irresponsible. 📋 Description CVE-2022-31630 is an Out-of-Bounds OOB...
CVE-2026-65650
CVE-2026-65650 — PoC: Authenticated DoS in Elgg Avatar Upload Authenticated denial of service in Elgg's avatar upload feature via unbounded image dimensions, causing GD memory exhaustion. Affected: Elgg saveIconFromUploadedFile'avatar' return elggerrorresponseelggecho'avatar:resize:fail'; PHP's G...
Important: Red Hat Security Advisory: gd security update
An update for gd is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
Important: Red Hat Security Advisory: gd security update
An update for gd is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CentOS Linux 7 [TuxCare] Security Update: gd / gd-devel / gd-progs Multiple Vulnerabilities (CENTOS7:CLSA-2026:1793782708)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1793782708 advisory. - gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is The GD2...
USN-8999-1 pillow vulnerabilities
It was discovered that Pillow incorrectly handled map stride values when loading certain McIdas AREA images. An attacker could possibly use this issue to obtain sensitive information or cause a denial of service. CVE-2026-54058 It was discovered that Pillow did not properly check for decompressio...
[SECURITY] Fedora 45 Update: perl-GD-SecurityImage-1.75-24.fc45
This module gives you a basic interface to create "security images". Most internet software use these in their registration screens to block robot programs which may register tons of fake member accounts. This module gives you a basic interface to create such an image...
CLEANSTART-2024-ZW00851 gdImageColorMatch in gd_color_match
Security vulnerability affects the gd package. gdImageColorMatch in gdcolormatch...
CLEANSTART-2024-DP49787 gd_gif_in
Security vulnerability affects the gd package. gdgifin...
CLEANSTART-2024-AB89473 In the GD Graphics Library (aka LibGD) through 2
Security vulnerability affects the gd package. In the GD Graphics Library aka LibGD through 2...
CLEANSTART-2024-BP29926 gdImageClone in gd
Security vulnerability affects the gd package. gdImageClone in gd...
CLEANSTART-2024-BA53680 When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2
Security vulnerability affects the gd package. When using the gdImageCreateFromXbm function in the GD Graphics Library aka LibGD 2...
CLEANSTART-2024-TR99974 read_header_tga in gd_tga
Security vulnerability affects the gd package. readheadertga in gdtga...
Fedora 45 : perl-GD-SecurityImage (2026-825527e021)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-825527e021 advisory. Until now, GD::SecurityImage used Perl's built-in rand function to generate secrets. The rand function is unsuitable for security applications because it is...
CVE-2026-114723
A flaw was found in Roundcube Webmail. A remote attacker can cause a Denial of Service DoS by submitting a crafted image with excessively large dimensions. When thumbnail generation falls back to the GD graphics library on non-Windows platforms, available-memory checks are not enforced. This allo...
FreeBSD : p5-GD -- OS command injection (2b47c440-d2c0-11f1-97dc-40b034429ecf)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2b47c440-d2c0-11f1-97dc-40b034429ecf advisory. GD project reports: Fix CVE-2026-11526, command injection via 2-arg open in makefilehandle. CWE-78,...
SUSE CVE-2026-114723
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcubeimage falls back to GD, the available-memory check was applied only on Windows, so on other platforms a crafted image with large dimensions was...
CVE-2026-114723
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcubeimage falls back to GD, the available-memory check was applied only on Windows, so on other platforms a crafted image with large dimensions was...