EUVD-2014-0040

Malware in sbrugna...

CVE-2025-27032

The CVE-2025-27032 vulnerability describes a memory corruption issue in Qualcomm closed-source components when loading a PIL-authenticated VM image without cache coherency. The flaw affects the handling of PIL VM images at load time, with the root cause identified as cache coherency problems that...

Malicious code in @zalastax/nolb-pil (npm)

The package @zalastax/nolb-pil was found to contain malicious code...

MAL-2025-13157 Malicious code in @zalastax/nolb-pil (npm)

The package @zalastax/nolb-pil was found to contain malicious code...

Debian: Security Advisory (DSA-5704-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-5473 Malicious code in pilloa (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Ubuntu 24.04 LTS. : Pillow vulnerability (USN-6744-3)

The remote Ubuntu 24.04 LTS. host has packages installed that are affected by a vulnerability as referenced in the USN-6744-3 advisory. USN-6744-1 fixed a vulnerability in Pillow. This update provides the corresponding updates for Ubuntu 24.04 LTS. Tenable has extracted the preceding description...

Debian dla-3786 : python-pil - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3786 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3786-1 [email protected] https://www.debian.org/lts/security/...

Debian: Security Advisory (DLA-3786-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-3768-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3768 : python-pil - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3768 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3768-1 [email protected]...

BIT-PILLOW-2021-34552

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

Debian dla-3724 : python-pil - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3724 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3724-1 [email protected] https://www.debian.org/lts/security/...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick

It is an exploit module targeting Apache Log4j. The target produ...

SUSE CVE-2022-22817

PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. A lambda expression could also be used...

EasyImages 安全漏洞

EasyImages is a thin wrapper on PIL by Jakub Cieslik individual developer. It is used for exploring, visualizing and sharing images. A security vulnerability exists in EasyImages version v2.0, which stems from the presence of an arbitrary file download vulnerability that can be exploited by an...

Pillow: Multiple Vulnerabilities

Background The friendly PIL fork. Description Multiple vulnerabilities have been discovered in Pillow. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at this time. Resolution...

GHSA-8M9X-PXWQ-J236 Pillow command injection

Python Image Library PIL 1.1.7 and earlier and Pillow before 2.5.0 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py...

GHSA-X895-2WRM-HVP7 PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles

The 1 loaddjpeg function in JpegImagePlugin.py, 2 Ghostscript function in EpsImagePlugin.py, 3 load function in IptcImagePlugin.py, and 4 copy function in Image.py in Python Image Library PIL 1.1.7 and earlier and Pillow before 2.3.1 do not properly create temporary files, which allow local users...

pil-lab.com Cross Site Scripting vulnerability OBB-2620129

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...