417 matches found
CVE-2025-8723
⚡️ Cloudflare Image Resizing 説明: このプラグインのREST APIエンドポイントはユーザー認証に失敗し、hookrestpredispatch メソッド内で入力のサニタイズが不適切です。この欠陥により、攻撃者はログイン不要で悪意のあるリクエストを作成し、任意のPHPコードを注入・実行できます。 🛠 このエクスプロイトの機能 プロフェッショナルでモジュール化・拡張可能なPythonスクリプト readme.txt ファイルの解析によるプラグイン脆弱性の自動検出 WAFおよび制限環境向けの複数のバイパス手法:...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: rcv: move memblockallowresize after linear mapping is ready The initial memblock metadata is accessed from the kernel image mapping. The regions arrays need to be “reallocated” from memblock and accessed through linear mapping to...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: watchqueue: fix pipe accounting mismatch Currently, watchqueuesetsize modifies the pipe buffers allocated to user-pipebufs, without updating the pipe-nraccounted value on the pipe itself. This occurs due to the if...
CVE-2026-89771
A flaw was found in the Linux kernel. A race condition exists in the ring buffer resizing mechanism, where tracebuffer subbufsize can be read without proper locking while it is being simultaneously resized. This could allow a local attacker to trigger unpredictable behavior or a denial of service...
CVE-2026-89501
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Hold cpubuffer::lock when resizing a subbuf Because, ringbuffersubbuforderset can clear cpubuffer-freepage, hold cpubuffer-lock to prevent races with ringbufferallocreadpage and ringbufferfreereadpage...
UBUNTU-CVE-2026-89501
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Hold cpubuffer::lock when resizing a subbuf Because, ringbuffersubbuforderset can clear cpubuffer-freepage, hold cpubuffer-lock to prevent races with ringbufferallocreadpage and ringbufferfreereadpage...
PT-2026-79639
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ring-buffer component where the ring buffer subbuf order set function allows changing the sub-buffer order even when resizing is disabled. Since this function free...
MiracleLinux 9 : openexr-3.1.1-3.el9_8.3 (AXSA:2026-1493:05)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1493:05 advisory. OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing CVE-2026-41142 OpenEXR: OpenEXR: Information disclosure and denial...
Denial of Service (DoS)
Overview thumbor is a thumbor is an open-source photo thumbnail service by globo.com Affected versions of this package are vulnerable to Denial of Service DoS via the proportion filter process. An attacker can exhaust system resources and cause service disruption by supplying an excessively large...
RLSA-2026:38499 Important: openexr security update
OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...
RLSA-2026:38498 Important: openexr security update
OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...
AlmaLinux 9 : openexr (ALSA-2026:38498)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:38498 advisory. OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing CVE-2026-41142 OpenEXR: OpenEXR: Information disclosure and denial of...
OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing
A flaw was found in OpenEXR, an image storage format library for the motion picture industry. An integer overflow vulnerability exists in the ImageChannel::resize function, which can be triggered when processing a specially crafted OpenEXR image file through the OpenEXRUtil public API. This can...
Important: Red Hat Security Advisory: openexr security update
An update for openexr is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing
A flaw was found in OpenEXR, an image storage format library for the motion picture industry. An integer overflow vulnerability exists in the ImageChannel::resize function, which can be triggered when processing a specially crafted OpenEXR image file through the OpenEXRUtil public API. This can...
OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing
A flaw was found in OpenEXR, an image storage format library for the motion picture industry. An integer overflow vulnerability exists in the ImageChannel::resize function, which can be triggered when processing a specially crafted OpenEXR image file through the OpenEXRUtil public API. This can...
RHEL 9 : openexr (RHSA-2026:39026)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39026 advisory. OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document...
ALSA-2026:38498 Important: openexr security update
OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...
RHEL 10 : openexr (RHSA-2026:39024)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39024 advisory. OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document...