11 matches found
CVE-2026-74842
A vulnerability was found in Kira-Pgr PromptShopMCP up to 5bc0cd17358e19a5415d11a531088170d7b81452. Affected is the function downloadimage of the file server.py of the component Image-Toolkit-MCP-Server. Performing a manipulation of the argument imageurl results in server-side request forgery. Th...
EUVD-2026-60078
A vulnerability was found in Kira-Pgr PromptShopMCP up to 5bc0cd17358e19a5415d11a531088170d7b81452. Affected is the function downloadimage of the file server.py of the component Image-Toolkit-MCP-Server. Performing a manipulation of the argument imageurl results in server-side request forgery. Th...
CVE-2026-74842
A server-side request forgery (SSRF) vulnerability exists in the Image-Toolkit-MCP-Server component of Kira-Pgr PromptShopMCP (up to commit 5bc0cd17358e19a5415d11a531088170d7b81452). The download_image function in server.py fails to properly validate the image_url argument, allowing a remote atta...
CVE-2026-74842 Kira-Pgr PromptShopMCP Image-Toolkit-MCP-Server server.py download_image server-side request forgery
A vulnerability was found in Kira-Pgr PromptShopMCP up to 5bc0cd17358e19a5415d11a531088170d7b81452. Affected is the function downloadimage of the file server.py of the component Image-Toolkit-MCP-Server. Performing a manipulation of the argument imageurl results in server-side request forgery. Th...
Linux Distros Unpatched Vulnerability : CVE-2021-27845
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpcenc.c CVE-2021-27845 Note that Nessus relies on the...
xmedcon 安全漏洞
xmedcon is an open source toolkit for medical image conversion from xmedcon open source. A security vulnerability exists in versions prior to xmedcon v.0.24.0, which stems from vulnerability to buffer overflows that could allow an attacker to execute arbitrary code...
WordPress FIT: Featured Image Toolkit Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)
Software FIT: Featured Image Toolkit Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 475578139d43 Credits Rafie Muhammad...
SUSE CVE-2021-27845
A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpcenc.c...
UBUNTU-CVE-2021-27845
A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpcenc.c...
Google Android Framesequence library remote code execution vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA for short. The Framesequence library is a GIF image toolkit library used in it. A remote code execution vulnerability exists in the Framesequence library in Android. The...