CVE-2021-22204

CVE-2021-22204 Exploit pour CVE-2021-22204 ExifTool - Exécution de code arbitraire Description de l'exploit Utilisez cet exploit pour générer un payload d'image JPEG pouvant être utilisé avec une version vulnérable d'ExifTool pour exécuter du code. Une commande personnalisée peut être fournie ou ...

CVE-2026-66916

Обход защиты паролем категории через JSON-формат в JoomGallery JoomGallery ≤ 4.3.0-stable — неаутентифицированный злоумышленник обходит парольный шлюз и скачивает защищённые изображения СВОДКА В JSON-представлении категорий JoomGallery существует обход контроля доступа без аутентификации. Когда...

android-kernel-exploitation-ashfaq-CVE-2019-2215

android-kernel-exploitation-ashfaq-CVE-2019-2215. Image Docker fournie par l'utilisateur Robert Dan lors de l'atelier...

CVE-2025-8723

⚡️ Cloudflare Image Resizing Описание: Конечная точка REST API плагина не проверяет аутентификацию пользователя и некорректно санирует ввод в методе hookrestpredispatch. Этот недостаток позволяет злоумышленникам внедрять и выполнять произвольный PHP-код, отправляя вредоносные запросы — без...

CVE-2025-47827

CVE-2025-47827 CVE-2025-47827에 대한 개념 증명 및 취약점 보고서. 목차 설명 공개 영향 탐지 완화 조치 바이너리 개념 증명 리소스 설명 IGEL OS v11 이전 버전에서는 igel-flash-driver 모듈이 암호화 서명을 부적절하게 검증하기 때문에 Secure Boot를 우회할 수 있습니다. 궁극적으로 검증되지 않은 SquashFS 이미지에서 조작된 루트 파일시스템을 마운트할 수 있습니다. IGEL OS 10의 igel-flash-driver Linux 커널 모듈에서 암호화 서명을 부적절하게 검증...

CVE-2025-49113

CVE-2025-49113 – Exploit RCE Roundcube Webmail PoC Python CVE ID: CVE-2025-49113 Type d'exploit : Exécution de code à distance via injection d'objet PHP Application : Roundcube Webmail ≤ 1.5.9 et ≤ 1.6.10 Langage de l'exploit : Python Auteur : 00xCanelo Statut : Testé et fonctionnel sur des...

USN-8868-1: LibreOffice vulnerabilities

It was discovered that LibreOffice incorrectly handled WMF image imports. An attacker could possibly use this issue to cause LibreOffice to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-63272 It was discovered that LibreOffice incorrectly handled PDF document import...

CVE-2021-22204

CVE-2021-22204 Description La neutralisation incorrecte des données utilisateur dans le format de fichier DjVu dans ExifTool versions 7.44 et ultérieures permet l'exécution arbitraire de code lors de l'analyse de l'image malveillante Script Script Link Utilisation du script : Commande système :...

CVE-2021-22205

Impact de la vulnérabilité Un problème a été découvert dans GitLab CE/EE affectant toutes les versions à partir de 11.9. GitLab ne validait pas correctement les fichiers image passés à un analyseur de fichiers, ce qui a entraîné une exécution de commande à distance. Produit vulnérable Gitlab CE/E...

CVE-2026-66917

IDOR + Stored XSS через нарушенную авторизацию на уровне объектов в JoomGallery JoomGallery ≤ 4.3.0 — пользователь с ролью Editor перехватывает любые изображения галереи и сохраняет XSS-нагрузку, что позволяет захватить сессию администратора КРАТКОЕ ОПИСАНИЕ Метод UserimageController::save в...

dasel-hardened-container

Conteneur durci dasel v3.3.1 Ceci est un package melange et une image de conteneur apko pour dasel v3.3.1 avec un correctif au moment de la construction pour CVE-2026-33320 expansion d'alias YAML sans limite. L'image est entièrement construite à partir d'un APK produit localement – aucune image...

Astra Linux – Vulnerability in libjpeg-turbo

Libjpeg-turbo 1.5.2 has a NULL Pointer Dereference issue in files jdpostct.c and jquant1.c, due to a malicious JPEG file...

Astra Linux – Vulnerability in ffmpeg5

When decoding an OpenEXR file that uses DWAA or DWAB compression, there is an implicit assumption that the height and width are divisible by 8. If the height or width of the image is not divisible by 8, the copy operation will loop at positions 0 and 1, continuing to write until a multiple of 8 i...

Astra Linux – Vulnerability in exiv2

Exiv2 0.27.2 allows attackers to cause a crash in the Exiv2::getULong function in types.cpp, when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimageint.cpp. This occurs because there is no validation of the relationship between the total size and the offset and size...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick version 7.0.11. In this version, an integer overflow in the WriteTHUMBNAILImage function in the coders/thumbnail.c file may lead to undefined behavior when processing a specially crafted image file submitted by an attacker. The greatest threat posed by this...

Astra Linux – Vulnerability in exiv2

In Exiv2 versions 0.27.1, an uncontrolled memory allocation for PngChunk::parseChunkContent allows an attacker to cause a denial of service crash due to a std::badalloc exception through a crafted PNG image file...

Astra Linux – Vulnerability in Firefox

The “Copy Image Link” context menu action would copy the final image URL after redirects. By embedding an image that triggered authentication flows—in conjunction with a Content Security Policy that stopped a redirection chain in the middle—the final image URL could contain an authentication toke...

Astra Linux – Vulnerability in ntfs-3g

A properly crafted NTFS image can lead to a out-of-bounds read in ntfsielookup in NTFS-3G before version 2021.8.22...

Astra Linux – Vulnerability in openexr

A flaw was discovered in OpenEXR’s TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image file to have it processed by OpenEXR, resulting in a floating-point exception error. The greatest threat posed by this vulnerability is to system availabili...

Astra Linux – Vulnerability in exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was discovered in Exiv2 versions v0.27.4 and earlier. This infinite loop occurs when Exiv2 is used to modify the metadata of a specially crafted image file. ...