pypdf: Possible infinite loop for not terminated inline images

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page text for example. PatchesThis has been fixed in pypdf==6.14.1. WorkaroundsIf you...

CVE-2026-16069

The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted through one of its AJAX actions before storing them and later echoing them into HTML attributes in the post editor's Featured Image meta box, allowing users with the Contributor...

CVE-2026-16069 Brizy - Page Builder < 2.8.19 - Contributor+ Stored XSS via Featured Image Focal Point

The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted through one of its AJAX actions before storing them and later echoing them into HTML attributes in the post editor's Featured Image meta box, allowing users with the Contributor...

CVE-2026-16069

The Brizy WordPress plugin, in versions prior to 2.8.19 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to sanitize or escape featured-image focal-point coordinates submitted via an AJAX action before they are stored and subsequently echoed into HTML attribute...

remove-ai-watermarks v0.25.0

Remove AI Watermarks Remove AI provenance marks from images and video you generated yourself: known visible labels such as the Gemini sparkle and vendor text marks; invisible pixel watermarks through diffusion regeneration; C2PA, EXIF, XMP, IPTC, and related AI metadata. Video support covers...

Exploit for CVE-2026-63223

CVE-2026-63223 — CodeIgniter 4 File Upload RCE Magic Bytes Bypas...

EUVD-2026-52573

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

CVE-2026-42170

A heap-based buffer overflow vulnerability exists in the GIMP DDS DirectDraw Surface file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel bpp value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the...

CVE-2026-11835

Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...

CVE-2026-16069: Improper Neutralization of Input During Web Page Generation

The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted through one of its AJAX actions before storing them and later echoing them into HTML attributes in the post editor's Featured Image meta box, allowing users with the Contributor...

PT-2026-67754

Name of the Vulnerable Software and Affected Versions hermes-agent versions prior to 0.16.1 Description A flaw in the xAI Image Generation Provider component allows for remote server-side request forgery SSRF, a condition where an attacker can induce the server to make requests to an unintended...

CVE-2026-70591: Server-Side Request Forgery (SSRF)

Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a Server-Side Request Forgery in Ghost Admin image fetching allowed any staff-level user to perform a blind HTTP GET request against internal hosts. No output was returned, but this could have been used to probe open ports on...

PT-2026-67657

The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted through one of its AJAX actions before storing them and later echoing them into HTML attributes in the post editor's Featured Image meta box, allowing users with the Contributor...

CVE-2026-18774: Server-Side Request Forgery (SSRF)

A flaw has been found in NousResearch hermes-agent up to 0.16.0. This affects the function saveurlimage of the file agent/imagegenprovider.py of the component xAI Image Generation Provider. This manipulation causes server-side request forgery. The attack may be initiated remotely. The exploit has...

CVE-2026-47612: Improper Limitation of a Pathname to a Restricted Directory

NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure...

PT-2026-67794

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the image loading component that allows an attacker to cause improper limitation of a pathname to a restricted directory. This could result in information...

PT-2026-67703

Name of the Vulnerable Software and Affected Versions pardus-image-writer versions prior to 1.0.4 Description An external control of file name or path issue exists in the software, which could allow an attacker to remove important client functionality. Recommendations Update pardus-image-writer t...

PT-2026-67837

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.7.0 through 0.10.0 Description An authenticated user whose features.image generation permission has been revoked can still trigger image generation by sending a feature flag in a chat-completion request. The server fails ...

PT-2026-67844

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.11.0 Description An authenticated attacker can bypass URL validation to perform a DNS rebinding attack. The software validates hostnames by resolving them once to reject private, loopback, and link-local addresse...