CVE-2021-22205

CVE-2021-22205 Descrizione - POC per CVE-2021-22205: Gitlab CE/EE RCE Vulnerabilità di esecuzione remota di codice non autorizzata POC && EXP - creato da antx il 2021-10-29. Dettaglio - È stato scoperto un problema in GitLab CE/EE che interessa tutte le versioni a partire dalla 11.9. GitLab non...

CVE-2026-38349

A flaw was found in FFmpeg. An integer overflow vulnerability in the hScale16To19c function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted image file. This can lead to the application becoming unresponsive or crashing, preventing legitimate users from...

CVE-2021-22205

CVE-2021-22205 Aufgrund einer fehlerhaften Überprüfung der Bilddateien, die an den Dateiparser von GitLab übergeben werden, kann ein Befehl ausgeführt werden. Ein Angreifer kann eine bösartige Anfrage konstruieren, um beliebige Befehle auf dem Zielsystem auszuführen, was letztendlich zur Kontroll...

CVE-2021-22205

CVE-2021-22205 GitLab CE/EE Pré-autenticação RCE usando ExifTool Este projeto é apenas para aprendizado, se os direitos de alguém foram violados, por favor entre em contato comigo para remover o projeto, e por últimoNÃO USE ILEGALMENTE. Se você tiver algum comportamento ilegal ao usar esta...

GitLab-CVE-2021-22205-

Impatto della vulnerabilità È stato scoperto un problema in GitLab CE/EE che interessa tutte le versioni a partire dalla 11.9. GitLab non convalidava correttamente i file immagine passati a un parser di file, il che ha portato all'esecuzione remota di comandi. Versioni interessate Gitlab CE/EE...

LogoFail-PoC

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Exigimos o retorno seguro de todos os cidadãos que foram feitos reféns pelo grupo terrorista Hamas. Não descansaremos até que cada refém seja libertado e retorne em segurança para casa. Você pode ajudar a trazê-los de volta para...

CVE-2021-22205-gitlab

Impatto della vulnerabilità È stato scoperto un problema in GitLab CE/EE che interessa tutte le versioni a partire dalla 11.9. GitLab non convalidava correttamente i file immagine passati a un parser di file, il che ha comportato l'esecuzione remota di comandi. Prodotto vulnerabile Gitlab CE/EE...

PT-2026-82763

An integer overflow in the hScale16To19 c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

CVE-2021-22205

Auswirkung der Sicherheitslücke In GitLab CE/EE wurde ein Problem entdeckt, das alle Versionen ab 11.9 betrifft. GitLab hat Bilddateien, die an einen Dateiparser übergeben wurden, nicht ordnungsgemäß validiert, was zu einer Remote-Codeausführung führte. Betroffenes Produkt Gitlab CE/EE 13.10.3...

CVE-2021-22205

Impatto della vulnerabilità È stato scoperto un problema in GitLab CE/EE che interessa tutte le versioni a partire dalla 11.9. GitLab non convalidava correttamente i file immagine passati a un parser di file, causando l'esecuzione remota di comandi. Prodotto vulnerabile Gitlab CE/EE 13.10.3 Gitla...

CVE-2021-22205

Impatto della Vulnerabilità È stato scoperto un problema in GitLab CE/EE che interessa tutte le versioni a partire dalla 11.9. GitLab non convalidava correttamente i file immagine passati a un parser di file, il che ha portato a un'esecuzione remota di comandi. Prodotto Vulnerabile Gitlab CE/EE...

CVE-2026-80101

A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation...

CVE-2026-55059

A flaw was found in OpenEXR, a widely used library for the EXR image format. A user processing a specially crafted image file could trigger a heap out-of-bounds write vulnerability in the SampleCountChannel::set function. This occurs due to an incorrect computation of the target Y coordinate,...

EUVD-2026-65004

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

CVE-2026-78465

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...

Astra Linux – Vulnerability in libjpeg-turbo

Libjpeg-turbo 1.5.2 has a NULL Pointer Dereference issue in files jdpostct.c and jquant1.c, due to a malicious JPEG file...

Astra Linux – Vulnerability in exiv2

In Exiv2 versions 0.27.1, an uncontrolled memory allocation for PngChunk::parseChunkContent allows an attacker to cause a denial of service crash due to a std::badalloc exception through a crafted PNG image file...

PT-2026-80931

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...

SUSE CVE-2026-59091

A flaw was found in GIMP's file format plugins, including those for PSD and PAA files. A remote attacker could exploit these vulnerabilities by tricking a user into opening a specially crafted image file. This could lead to unexpected application behavior or other potential security impacts witho...

CVE-2026-59091

A flaw was found in GIMP's file format plugins, including those for PSD and PAA files. A remote attacker could exploit these vulnerabilities by tricking a user into opening a specially crafted image file. This could lead to unexpected application behavior or other potential security impacts witho...