RHSA-2026:47236 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

CVE-2026-63228

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server...

CVE-2026-63228 Unrestricted image upload vulnerability

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server...

CVE-2026-63228

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server...

CVE-2026-63228

Koollab LMS contains an unrestricted image upload vulnerability (via the feedback mail registration endpoint) that allows an authenticated attacker to upload content disguised as an image, potentially enabling further server attacks. The issue is described across multiple sources (NVD/CVE records...

CVE-2026-63228 Unrestricted image upload vulnerability

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server...

EUVD-2026-50123

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server...

PT-2026-65699

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server...

ROS-20260729-73-0036

The vulnerability in GIMP is related to errors that occur when a string or array is terminated with the null character. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

PT-2026-65962

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw in the parsing of TIF files allows remote attackers to execute arbitrary code. The issue occurs due to insufficient validation of user-supplied data, leading to an integer overflow—a...

PT-2026-65959

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap-based buffer overflow exists during the parsing of TIF files. The issue occurs because the software fails to properly validate the length of user-supplied data before copying it to a...

PT-2026-65960

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A stack-based buffer overflow exists during the parsing of TIF files. The issue occurs because the software fails to properly validate the length of user-supplied data before copying it to a...

PT-2026-65963

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw in the parsing of SGI files allows remote attackers to execute arbitrary code on affected installations. The issue occurs due to improper validation of user-supplied data, leading to an...

PT-2026-65964

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap-based buffer overflow exists during the parsing of TIF files. The issue occurs because the software fails to properly validate the length of user-supplied data before copying it to a...

PT-2026-65965

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw in the parsing of TIF files allows remote attackers to execute arbitrary code. The issue occurs due to insufficient validation of user-supplied data, leading to an integer overflow—a...

Linux Distros Unpatched Vulnerability : CVE-2026-64644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In versions 15.5.0 through 15.5.20 and 16.0.0 through 16.2.10, when self-hosting Next.js...

ALSA-2026:48021 Important: python-pillow security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

OPENSUSE-SU-2026:11405-1 ImageMagick-7.1.2.28-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.28-1.1 package on the GA media of openSUSE Tumbleweed...

TencentOS Server 4: conmon (TSSA-2026:0737)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0737 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

NewStart CGSL MAIN 6.06 : docker-ce Vulnerability (NS-SA-2026-0054)

The remote NewStart CGSL host, running version MAIN 6.06, has docker-ce packages installed that are affected by a vulnerability: - Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is bui...