CVE-2026-110649

Stills before 25.24.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted media file paths. Attackers can name a media file with $... or backticks to execute operating system commands with Node.js process privileges when ffmpeg,...

CVE-2026-110649 Stills before 25.24.2 OS Command Injection via Media File Names

Stills before 25.24.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted media file paths. Attackers can name a media file with $... or backticks to execute operating system commands with Node.js process privileges when ffmpeg,...

EUVD-2026-101277

Stills before 25.24.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted media file paths. Attackers can name a media file with $... or backticks to execute operating system commands with Node.js process privileges when ffmpeg,...

PT-2025-47159

Name of the Vulnerable Software and Affected Versions MyScreenTools version 2.2.1.0 Description The software contains a critical OS command injection issue in the GIF compression tool. The application does not properly sanitize user-supplied file paths before passing them to cmd.exe, which allows...

EUVD-2017-9257

Malware in sbrugna...

EUVD-2017-1558

Malware in sbrugna...

EUVD-2020-11650

Malware in sbrugna...

EUVD-2023-40170

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-46009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c. CVE-2023-46009 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2023-44821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect GifRealloc calls, might allow a denial of service memory consumption. NOTE: th...

CVE-2023-36193

Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguityerror component at /src/clp.c...

Linux Distros Unpatched Vulnerability : CVE-2023-36193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguityerror component at /src/clp.c. CVE-2023-36193 Note that Nessus relies on the...

OPENSUSE-SU-2024:13023-1 gifsicle-1.94-1.1 on GA media

These are all security issues fixed in the gifsicle-1.94-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13712-1 gifsicle-1.95-1.1 on GA media

These are all security issues fixed in the gifsicle-1.95-1.1 package on the GA media of openSUSE Tumbleweed...

Mageia: Security Advisory (MGASA-2024-0202)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2024-0202 Updated gifsicle packages fix security vulnerability

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c. CVE-2023-46009...

Updated gifsicle packages fix security vulnerability

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c. CVE-2023-46009...

openSUSE Security Advisory (openSUSE-SU-2024:0146-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2024:0146-1 Security update for gifsicle

This update for gifsicle fixes the following issues: Update to version 1.95: - CVE-2023-46009: Fixed floating point exception vulnerability via resizestream at src/xform.c boo1216403...

Security update for gifsicle (important)

openSUSE Security Update: Security update for gifsicle Announcement ID: openSUSE-SU-2024:0146-1 Rating: important References: 1216403 Cross-References: CVE-2023-46009 CVSS scores: CVE-2023-46009 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP...