Linux Distros Unpatched Vulnerability : CVE-2026-94483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolutio...

PT-2026-104375

Name of the Vulnerable Software and Affected Versions Next.js versions 16.0.0 through 16.3.7 Description Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns. This allows the optimized image fetch to reach private IP addresses after...

PT-2026-105513

Overview probe-image-size scans the SVG header with a searching regular expression, //. On input that contains many , the engine restarts the ^ scan at every position and runs to end of input each time, giving quadratic time complexity. Both the synchronous and the streaming parser are affected...

PT-2026-104459

Showdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and image subparsers, which fail to escape double quotes in destination URLs placed into href and src attributes. Attackers can craft markdown links or images containing a double quote followed by onerror or...

CVE-2026-104466: Improper Neutralization of Input During Web Page Generation

YesWiki before 4.6.7 contains a stored cross-site scripting vulnerability in formatters/wakka.php that allows users who can edit pages or post comments to inject event handlers by placing quotes in markdown image URLs. Attackers can store a crafted markdown image whose src breaks out of the...

PT-2026-104276

YesWiki before 4.6.7 contains a stored cross-site scripting vulnerability in formatters/wakka.php that allows users who can edit pages or post comments to inject event handlers by placing quotes in markdown image URLs. Attackers can store a crafted markdown image whose src breaks out of the...

CVE-2026-26830

CVE-2026-26830：pdf-image 中的 OS 命令注入 摘要 pdf-image 直到版本 2.0.0 均存在通过 pdfFilePath 参数导致的 OS 命令注入漏洞。该包使用 util.format 构建 shell 命令字符串，并通过 childprocess.exec 执行。如果应用程序将攻击者控制的文件路径传入 PDFImage，该路径中的 shell 元字符可能导致任意命令执行。 受影响产品 产品| 受影响版本| 修复版本 ---|---|--- pdf-image| 直到 2.0.0 的所有版本| 截至 2026-03-24 无可用修复 漏洞详情 CVE...

cve-2019-5420

CVE-2019-5420 这是 Cved 的一部分： 一个用于管理易受攻击的 docker 容器的工具。 Cved: https://github.com/git-rep-src/cved 镜像来源：https://github.com/cved-sources/cve-2019-5420 镜像作者：https://github.com/knqyf263/CVE-2019-5420...

go-pillage-registries

go-pillage-registries Este proyecto toma un registro Docker y saquea el manifiesto y la configuración de cada imagen en su catálogo. Utiliza el paquete del comando crane de Google, que debería seguir la semántica de keychain de Docker. Si desea anular esto, simplemente cambie authn.DefaultKeychai...

Important: Red Hat Security Advisory: General availability of the satellite/iop-advisor-backend-rhel9 container image

A new satellite/iop-advisor-backend-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services,...

Important: Red Hat Security Advisory: satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview

A new satellite/iop-vulnerability-engine-rhel9 container image is now available as a Technology Preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages...

Important: Red Hat Security Advisory: General availability of the satellite/iop-advisor-backend-rhel9 container image

A new satellite/iop-advisor-backend-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services,...

LogoFail-PoC

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 我们要求安全归还所有被恐怖组织哈马斯劫持为人质的公民。在所有的人质获释并安全回家之前，我们不会休息。你可以帮助他们回家。https://stories.bringthemhomenow.net/ BIOS 镜像解析器漏洞利用工具 💻 该工具演示了如何利用 BIOS 镜像解析器中的缓冲区溢出漏洞。它仅用于教育目的。 概述 ℹ️ 该漏洞利用针对 BIOS 固件镜像解析器函数 parseimage 中一个假设的缓冲区溢出漏洞。该漏洞允许攻击者构造一个恶意的 BMP 图像文件，在启动过程中触发缓冲区溢出并执行任意代码。 使用方法...

BIDO

BIDO 本代码属于“BIDO：一种应对图像型恶意软件检测中混淆与概念漂移挑战的统一方法”。 作者 作者：Junhui Li1, Chengbin Feng2, Zhiwei Yang1, Qi Mo1 和 Wei Wang1。 机构 机构1：软件学院，云南大学，昆明，云南 650091，中国。 机构2：信息系统学院，新南威尔士大学，悉尼，新南威尔士州 2052，澳大利亚。 数据集可用性 由于数据集规模较大，我们通过云存储提供公开访问，并在本仓库中提供详细的使用说明。 云存储 完整的 Data-Ideal 和 Data-Obfu 数据集托管在...

Important: Red Hat Security Advisory: Technical preview of the satellite/iop-vulnerability-frontend-rhel9 container image

A new satellite/iop-vulnerability-frontend-rhel9 container image is now available as a technical preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed package...

Important: Red Hat Security Advisory: Technical preview of the satellite/iop-vmaas-rhel9 container image

A new satellite/iop-vmaas-rhel9 container image is now available as a technical preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running...

Important: Red Hat Security Advisory: Technical preview of the satellite/iop-vulnerability-frontend-rhel9 container image

A new satellite/iop-vulnerability-frontend-rhel9 container image is now available as a technical preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed package...

FORT-validator

FORT Validator 一个 RPKI 依赖方和 RTR 服务器。 文档 主页 安装 用法 参数 Docker 镜像 参见 docker/ 目录。...

Copy-Fail-CVE-2026-31431-Kubernetes-PoC

Copy Fail CVE-2026-31431 — Kubernetes 容器逃逸 PoC 一个概念验证，演示完全无特权容器 如何通过共享容器镜像层利用 CVE-2026-31431 Linux 内核页缓存损坏漏洞，在 Kubernetes 上实现节点级代码执行 。 免责声明： 本仓库仅用于教育和防御目的。请仅在您拥有或已获得明确授权测试的系统上使用。 背景 CVE-2026-31431（"Copy Fail"）是 Linux 内核页缓存写时复制（CoW）路径中的一个漏洞。AFALG splice 竞态条件允许无特权进程损坏只读...

trivy v0.75.0

📖 Documentation Trivy pronunciation is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Targets what Trivy can scan: Container Image Filesystem Git Repository remote Virtual Machine Image Kubernetes...