61158 matches found
CVE-2022-46463
CVE-2022-46463 Harbor public image download Harbor is an open-source image hosting platform. This script enumerates all public images and supports dump operations similar to docker pull, making it easy to find sensitive leaked information from publicly exposed images. Usage $ python3 harbor.py...
CVE-2024-5737
CVE-2024-5737 AdmirorFrames Joomla! Extension HTML tag: $height=0x3c; $im = imagecreate$width, $height; $hex=unpack'H',$payload; $chunks=strsplit$hex1, 6; for$i=0; $i count$chunks; $i++ $colorchunks=strsplit$chunks$i, 2;...
CVE-2023-50596
CVE-2023-50596 Suggested description Cross Site Scripting vulnerability in Simple Image Stack Website using PHP and API v.1.00000 allows a remote attacker to execute arbitrary code via a crafted payload to the URL. Additional Information Lets paste our payload in the URL section...
PyStegosploit
PyStegosploit - Exploit Delivery via Steganography and Polyglots video1 | video2 | page by Charmve - yidazhang1 at gmaildotcom, @Charmve @therealsaumil @amichael May 2021 Stegosploit creates a new way to encode "drive-by" browser exploits and deliver them through image files. These payloads are...
webp_Android10_r33_CVE-2023-1999
/ \/ / / / \ \ / / \ / \//// / / / \ \ / / / / / / / \ \ / \ /////v1.0.2 Description: WebP codec: library to encode and decode images in WebP format. This package contains the library that can be used in other programs to add WebP support, as well as the command line tools 'cwebp' and...
PT-2026-104652
A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the...
CVE-2026-105166: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the...
Which Image Property Carries the Jailbreak? A Controlled Dissection of Image-To-Text Jailbreaks
Image-to-text jailbreaks place harmful intent in text, image content, or the relationship between them. We examine image-side factors across four published attack families on a 313-prompt StrongREJECT slice, using five multimodal models and an additional appendix evaluation of InternVL3.5-8B. The...
CVE-2026-3844-Breeze-Cache-WordPress-Plugin-Remote-Code-Execution
CVE-2026-3844 – Breeze Cache WordPress Plugin Unauthenticated RCE -red?style=flat-square CVE-2026-3844 is a critical unauthenticated arbitrary file upload vulnerability in the Breeze Cache WordPress plugin versions ≤ 2.4.4. An attacker can post a comment containing a malicious tag pointing to a P...
CVE-2026-88854
CVE-2026-88854 — SQL-инъекция в OrdaSoft Joomla Gallery Python 3 PoC-сканер/эксплойт для CVE-2026-88854 в OrdaSoft OS Responsive Image Gallery для Joomla. | ---|--- Компонент| comosgallery, comosgallerylight Затронуто| 1.0.0 – 6.2.6 Исправлено в| 6.2.7+ CVSS 4.0| 9.3 Критический Аутентификация| Н...
CVE-2026-39938
Vulnerability Report: Cacti Unauthenticated RCE on Graph Image Researcher: K | Product: Cacti ≤ 1.2.30 | CVE: CVE-2026-39938 01 Vulnerability Summary Field| Value ---|--- Product| Cacti — The Complete RRDtool-based Graphing Solution Affected Versions| ≤ 1.2.30 Vulnerability Class| CWE-22: Path...
CVE-2022-40471
CVE-2022-40471 – CPMS Authenticated File Upload RCE 📌 Overview CVE-2022-40471 is an authenticated Remote Code Execution vulnerability affecting Clinic's Patient Management System CPMS. The vulnerability exists due to insufficient validation of uploaded files in the user profile image upload...
WordPress Featured Image from URL plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by ChuongVN in WordPress Plugin Featured Image from URL versions = 6.0.7...
CVE-2026-103648
CVE-2026-103648 — Path Traversal в image-downloader Обнаружено:Amirhossein Roustaei @EterNullSec — Eternull Security ⚠️ Только в образовательных целях. Этот репозиторий документирует уязвимость, раскрытую в рамках ответственного раскрытия. Весь PoC-код предназначен исключительно для авторизованных...
CVE-2026-103584
CVE-2026-103584: Небезопасные URL лицензий в CommonsMetadata Автор отчёта: Marco Paciaroni BomboBombone. CommonsMetadata копировало значение licensetpllink из описания файла в поле LicenseUrl метаданных изображения, не ограничивая схему URL. Редактор мог сохранить URL со схемой javascript:. Когда...
CVE-2021-42183
CVE-2021-42183 MasaCMS 7.2.1 is affected by a path traversal vulnerability in /index.cfm/api/asset/image/. Detection If this file is readable it means the vulnerablilty exists. https://example.com/index.cfm/api/asset/image/?filePath=/Application.cfc Exploit...
CVE-2021-22204
CVE-2021-22204 Vulnerability exiftool Arbitrary Command Execution Usage 1. Set the IP and port to receive the reverse shell in the exploit.py file, then run docker compose up 2. After accessing the docker shell, running python3 exploit.py in the /root path will generate the image.jpg attack code ...
CVE-2026-13001
CVE-2026-13001 Podlove Podcast Publisher CVSS 9.8 Critical | Unauthenticated Arbitrary File Upload leading to Remote Code Execution Overview Critical vulnerability in the Podlove Podcast Publisher WordPress plugin versions up to and including 4.5.1 that allows unauthenticated attackers to upload...
Steganography-Online-Codec-JavaScript
Steganography Online Codec SDK для JavaScript и NPM Steganographic Online Codec позволяет скрывать сообщение, зашифрованное паролем, внутри изображений и фотографий с помощью алгоритма шифрования AES с ключом, полученным на основе 256-битного PBKDF2. Вы можете использовать его бесплатно по адресу...