2796 matches found
CVE-2021-22205
CVE-2021-22205 Description - POC for CVE-2021-22205: Gitlab CE/EE RCE 未授权远程代码执行漏洞 POC && EXP - create by antx at 2021-10-29. Detail - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file...
CVE-2021-22205
Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...
CVE-2021-22205
CVE-2021-22205 GitLab fails to properly verify image files passed to the file parser, leading to command execution. An attacker can craft malicious requests to exploit this vulnerability and execute arbitrary commands on the target system, ultimately taking control of the GitLab server. Since mos...
CVE-2021-22205
Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...
CVE-2021-22205
漏洞影响 在GitLab CE/EE中发现了一个问题，影响从11.9版本开始的所有版本。GitLab未能正确验证传递给文件解析器的图像文件，导致远程命令执行。 受影响产品 Gitlab CE/EE /tmp/1.txt...
CVE-2021-22205
CVE-2021-22205 GitLab CE/EE Preauth RCE using ExifTool This project is for learning only, if someone's rights have been violated, please contact me to remove the project, and the lastDO NOT USE IT ILLEGALLY If you have any illegal behavior in the process of using this tool, you will bear all the...
LogoFail-PoC
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 私たちは、テロ組織ハマスによって人質に取られたすべての市民の安全な帰還を要求します。すべての人質が解放され、無事に帰還するまで、私たちは休みません。あなたも彼らを家に連れ戻すのを助けることができます。https://stories.bringthemhomenow.net/ BIOSイメージパーサーエクスプロイトツール 💻 このツールは、BIOSイメージパーサーのバッファオーバーフロー脆弱性を悪用するデモです。教育目的のみを意図しています。 概要 ℹ️...
CVE-2021-22205-gitlab
脆弱性の影響 GitLab CE/EEの11.9以降の全バージョンにおいて、問題が発見されました。GitLabはファイルパーサーに渡される画像ファイルを適切に検証しておらず、その結果、リモートコード実行が発生する可能性がありました。 影響を受ける製品 Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE 13.8.8 環境構築 root@kitploit: export GITLABHOME=/srv/gitlab sudo docker run --detach \ --hostname gitlab.example.com ...
GitLab-CVE-2021-22205-
脆弱性の影響 GitLab CE/EE において、バージョン11.9以降のすべてのバージョンに影響する問題が発見されました。GitLab はファイルパーサーに渡された画像ファイルを適切に検証しておらず、リモートコマンド実行が発生していました。 影響を受けるバージョン Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE 13.8.8 脆弱性の影響 近日公開... 参考 https://github.com/mr-r3bot/Gitlab-CVE-2021-22205...
Astra Linux – Vulnerability in grub2
A flaw was discovered in grub2. A specially crafted JPEG file can cause the JPEG parser in grub2 to incorrectly check the boundaries of its internal buffers, leading to an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is still a concer...
Astra Linux – Vulnerability in libjpeg-turbo
Libjpeg-turbo 1.5.2 has a NULL Pointer Dereference issue in files jdpostct.c and jquant1.c, due to a malicious JPEG file...
Astra Linux – Vulnerability in openimageio
There is a heap-based buffer overflow vulnerability in the tile decoding code of the TIFF image parser in OpenImageIO’s master-branch-9aeece7a and v2.3.19.0. A specially crafted TIFF file can lead to out-of-bounds memory corruption, which may result in arbitrary code execution. An attacker can...
Astra Linux – Vulnerability in exiv2
In Exiv2 versions 0.27.1, an uncontrolled memory allocation for PngChunk::parseChunkContent allows an attacker to cause a denial of service crash due to a std::badalloc exception through a crafted PNG image file...
Astra Linux – Vulnerability in pillow
A issue was discovered in Pillow before version 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data block. This could lead to a denial-of-service attack on Image.open prior to Image.load...
CVE-2026-21092
Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege...
CVE-2026-21092
Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege...
EulerOS 2.0 SP12 : libXpm (EulerOS-SA-2026-3348)
According to the versions of the libXpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the xpmNextWord function by...
Linux Distros Unpatched Vulnerability : CVE-2026-38348
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted...
CVE-2026-38349
A flaw was found in FFmpeg. An integer overflow vulnerability in the hScale16To19c function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted image file. This can lead to the application becoming unresponsive or crashing, preventing legitimate users from...
