3924 matches found
Stable Diffusion Webui 1.10.0 - Open Redirect
An open redirect vulnerability exists in Stable-Diffusion-Webui 1.10.0, where the file parameter in the /file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. id: CVE-2024-11044...
CVE-2026-77815 Infinite Image Browsing Resolves Paths With normpath, Allowing Symlink Escape From Scanned Directories
toabspath in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links. A symlink placed inside a scanned directory therefore satisfies the containment comparison performed by ispathtrusted in scripts/iib/api.py while...
EUVD-2026-63993
toabspath in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links. A symlink placed inside a scanned directory therefore satisfies the containment comparison performed by ispathtrusted in scripts/iib/api.py while...
CVE-2026-77815
Infinite Image Browsing (a Stable Diffusion WebUI extension) is vulnerable to a symlink-based path traversal in to_abs_path (scripts/iib/tool.py). The function uses os.path.normpath, which collapses dot segments but does not resolve symbolic links. An attacker who can place a symlink inside a sca...
CVE-2026-77814 Infinite Image Browsing is_path_trusted Prefix Comparison Omits the Trailing Path Separator
ispathtrusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswithparentpath, without appending a path separator. A directory whose name merely begins with an allowed path therefore satisfies the comparison, so where /data/images is allowed ...
EUVD-2026-63992
ispathtrusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswithparentpath, without appending a path separator. A directory whose name merely begins with an allowed path therefore satisfies the comparison, so where /data/images is allowed ...
CVE-2026-77814 Infinite Image Browsing is_path_trusted Prefix Comparison Omits the Trailing Path Separator
ispathtrusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswithparentpath, without appending a path separator. A directory whose name merely begins with an allowed path therefore satisfies the comparison, so where /data/images is allowed ...
CVE-2026-42926 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
CVE-2026-40460 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-6VMC-2WH4-77QP vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
CVE-2026-42934 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-X88Q-X2R7-VG3G vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-V43F-895R-CHHH vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-H7RQ-F9GQ-MC8R vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
CVE-2026-42946 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-82W2-X7HF-5H8R vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
CVE-2026-27784 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-HGFR-JMPR-2P89 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...