58883 matches found
EUVD-2026-92521
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Image Slider Widget image-slider-widget allows Stored XSS.This issue affects Image Slider Widget: from n/a through 1.1.130...
CVE-2026-42700 WordPress Image Slider Widget plugin <= 1.1.130 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Image Slider Widget image-slider-widget allows Stored XSS.This issue affects Image Slider Widget: from n/a through 1.1.130...
CVE-2026-42700
The GhozyLab Image Slider Widget (image-slider-widget) plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) . This issue is caused by Improper Neutralization of Input During Web Page Generation (CWE-79). The vulnerability affects versions from n/a through 1.1.130 . No specific ...
WordPress Image Slider Widget plugin <= 1.1.130 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Image Slider Widget versions = 1.1.130...
CVE-2019-16113-Dockerfile
Bludit Directory Traversal Vulnerability CVE-2019--16113 Bludit-3.9.2 is a lightweight CMS that only requires a LAMP environment to run. During image upload, Bludit checks the file extension but does not delete the file in time; an attacker can also achieve directory traversal by controlling the...
CVE-2026-19395
A flaw was found in Qt. When processing styled text in a Text element, the text parser improperly handles an image tag containing an attribute with an empty value. An attacker can exploit this issue by supplying specially crafted styled text, causing an internal validation check to fail and...
CVE-2021-22204
CVE-2021-22204 Exploit para CVE-2021-22204 ExifTool - Ejecución de código arbitrario Descripción del Exploit Usa este exploit para generar un payload de imagen JPEG que puede ser utilizado con una versión vulnerable de ExifTool para ejecución de código. Se puede proporcionar un comando...
CVE-2026-66916
Password-Protected Category Bypass via JSON Format in JoomGallery JoomGallery ≤ 4.3.0-stable — Unauthenticated Attacker Bypasses Password Gate to Download Protected Images SUMMARY An unauthenticated access control bypass exists in JoomGallery's category JSON view. When a gallery category is...
android-kernel-exploitation-ashfaq-CVE-2019-2215
android-kernel-exploitation-ashfaq-CVE-2019-2215. Docker image provided by user Robert Dan in the workshop android-kernel-exploitation-ashfaq-CVE-2019-2215...
CVE-2025-8723
⚡️ Cloudflare Image Resizing Description: The plugin's REST API endpoint fails to authenticate users and improperly sanitizes input in the hookrestpredispatch method. This flaw enables attackers to inject and execute arbitrary PHP code by crafting malicious requests — with no login required. 🛠...
CVE-2025-47827
CVE-2025-47827 Proof-of-concept and vulnerability report for CVE-2025-47827. Contents Description Disclosure Impact Detection Mitigation Binaries Proof of Concept Resources Description In IGEL OS before v11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a...
CVE-2025-49113
CVE-2025-49113 – Exploit RCE de Roundcube Webmail PoC en Python ID de CVE: CVE-2025-49113 Tipo de Exploit: Ejecución Remota de Código mediante Inyección de Objetos PHP Aplicación: Roundcube Webmail ≤ 1.5.9 y ≤ 1.6.10 Lenguaje del Exploit: Python Autor: 00xCanelo Estado: Probado y Funcionando en...
USN-8868-1: LibreOffice vulnerabilities
It was discovered that LibreOffice incorrectly handled WMF image imports. An attacker could possibly use this issue to cause LibreOffice to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-63272 It was discovered that LibreOffice incorrectly handled PDF document import...
CVE-2021-22204
CVE-2021-22204 Descripción La neutralización incorrecta de datos del usuario en el formato de archivo DjVu en ExifTool versiones 7.44 y posteriores permite la ejecución de código arbitrario al analizar la imagen maliciosa. Script Enlace del script Uso del script: Comando del sistema: bash...
CVE-2021-22205
Impacto de la vulnerabilidad Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones a partir de 11.9. GitLab no validaba correctamente los archivos de imagen que se pasaban a un analizador de archivos, lo que resultaba en una ejecución remota de comandos. Producto afectado...
CVE-2026-66917
IDOR + Stored XSS via Broken Object-Level Authorization in JoomGallery JoomGallery ≤ 4.3.0 — Editor-Role User Hijacks Any Gallery Image and Stores XSS Payload, Enabling Admin Session Takeover SUMMARY UserimageController::save in JoomGallery checks checkACL'edit', ... instead of checkACL'edit.own'...
dasel-hardened-container
dasel v3.3.1 hardened container This is a melange package and apko container image for dasel v3.3.1 with a build-time patch for CVE-2026-33320 unbounded YAML alias expansion. The image is built entirely from a locally-produced APK - no prebuilt upstream image is used. Prerequisites Tool| Tested...
Astra Linux – Vulnerability in exiv2
Exiv2 0.27.2 allows attackers to cause a crash in the Exiv2::getULong function in types.cpp, when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimageint.cpp. This occurs because there is no validation of the relationship between the total size and the offset and size...
Astra Linux – Vulnerability in ffmpeg5
When decoding an OpenEXR file that uses DWAA or DWAB compression, there is an implicit assumption that the height and width are divisible by 8. If the height or width of the image is not divisible by 8, the copy operation will loop at positions 0 and 1, continuing to write until a multiple of 8 i...