CVE-2024-53615

CVE-2024-53615 Karl Ward 的 files.gallery v0.3.0 至 0.11.0 版本中视频缩略图渲染组件存在命令注入漏洞，允许远程攻击者通过精心构造的视频文件执行任意代码。 前置条件： PATH 中存在 ffmpeg config.php：'allowupload' = true PHP 配置中必须启用 exec 漏洞位于以下行（取自版本 0.9.12），该行用于生成视频预览： $cmd = $ffmpegpath . ' -ss 3 -t 1 -hidebanner -i "' . strreplace'"', '"', $this-path . '"...

LG Supersign EZ CMS - Remote Code Execution

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsrserver/device/getThumbnail. id: CVE-2018-17173 info: name: LG Supersign EZ CMS - Remote Code Execution author: pussycat0x severity: critical description: | LG SuperSign CMS allows remote attackers...

LG LED Assistant - Thumbnail Path Traversal File Upload

A path traversal vulnerability exists in the endpoint handler for /api/thumbnail in Common.js. An unauthenticated remote attacker can exploit this to upload arbitrary files to any location on the disk drive where the product is installed. id: CVE-2024-2863 info: name: LG LED Assistant - Thumbnail...

CVE-2025-32140

🚨 CVE-2025-32140 – WP Remote Thumbnail 漏洞利用（任意文件上传） 📝 描述 CVE-2025-32140 是 WordPress WP Remote Thumbnail 插件中的一个严重漏洞 。该漏洞允许经过身份验证的攻击者 （具有贡献者或更高权限）通过滥用一个接受未经过滤 URL 的功能缺陷，上传任意文件 （例如 webshell ）。 该插件未能验证所提供的 remotethumb URL 中获取的文件类型或内容。这使攻击者能够将恶意的 PHP 文件（例如后门）保存到 /wp-content/uploads 目录中。 ⚠️ 受影响组件 插件 ：WP...

CVE-2026-26833

CVE-2026-26833: thumbler 中的操作系统命令注入 摘要 thumbler 版本 1.1.2 及之前版本在 lib/thumbler.js 的 thumbnail 函数中存在操作系统命令注入漏洞。该包将 input、output、time 和 size 值拼接成一个 ffmpeg 命令字符串，并使用 childprocess.exec 执行该字符串。攻击者如果能够控制这些值中的任意一个，就可以注入 shell 语法并执行任意命令。 受影响产品 产品| 受影响版本| 修复版本 ---|---|--- thumbler| 所有 1.1.2 及之前版本| 截至...

CVE-2023-44763_ConcreteCMS-Arbitrary-file-upload-Thumbnail

ConcreteCMS 存储型 XSS v.9.2.1 作者：（Sergio） 描述： ConcreteCMS v9.2.1 存在任意文件上传漏洞，该漏洞允许存储型跨站脚本（XSS）。 攻击向量： “Thumbnail”文件上传净化逻辑中存在漏洞，允许您上传包含隐藏 alert 跨站脚本（XSS）的 PDF / SVG / HTML 文件。 POC： 登录面板后，我们将进入“Settings - Tags - Thumbnail off Dashboard Menu”。 以下是 payload： XSS PDF Payload： 这是一个使用 JS2PDFInjector 工具生成的 X...

CVE-2026-86930

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...

CVE-2026-86930

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...

CVE-2026-86930

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...

CVE-2026-86930

An out-of-bounds read vulnerability exists in FileMaker Server for Linux . An attacker can upload a specially crafted image file to a container field, which causes the system to disclose process memory during thumbnail generation within FileMaker WebDirect . This vulnerability is addressed in Fil...

CVE-2026-86930: Out-of-bounds Read

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...

CVE-2026-88419

An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint /index.php?m=member&f=article&v=thumbUpload of WuzhiCMS 5.0.0 allows an authenticated low-privileged member to upload a crafted .php file and execute arbitrary PHP code on the server, because the stored file...

CVE-2026-88419

An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint /index.php?m=member&f=article&v=thumbUpload of WuzhiCMS 5.0.0 allows an authenticated low-privileged member to upload a crafted .php file and execute arbitrary PHP code on the server, because the stored file...

CVE-2026-88419

WuzhiCMS version 5.0.0 is vulnerable to an unrestricted file upload via the thumbnail-upload endpoint (/index.php?m=member&f=article&v=thumbUpload). The application fails to perform content validation or use an extension allowlist, taking the file extension verbatim from the client-supplied filen...

CVE-2026-88419: Unrestricted Upload of File with Dangerous Type

An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint /index.php?m=member&f=article&v=thumbUpload of WuzhiCMS 5.0.0 allows an authenticated low-privileged member to upload a crafted .php file and execute arbitrary PHP code on the server, because the stored file...

EUVD-2026-84851

An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint /index.php?m=member&f=article&v=thumbUpload of WuzhiCMS 5.0.0 allows an authenticated low-privileged member to upload a crafted .php file and execute arbitrary PHP code on the server, because the stored file...

CVE-2026-88419

An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint /index.php?m=member&f=article&v=thumbUpload of WuzhiCMS 5.0.0 allows an authenticated low-privileged member to upload a crafted .php file and execute arbitrary PHP code on the server, because the stored file...

mailpit -- Multi-frame animation bypass of thumbnail pixel budget

Mailpit author reports: The fix for CVE-2026-67446 / GHSA-75mr-qw9x-3r39 "Thumbnail generation decodes unbounded image dimensions before scaling", patched in v1.30.4 bounds only the width × height of a single frame. The decoded-size budget is still not enforced over frame count, so an animated PN...

PT-2026-95301

Name of the Vulnerable Software and Affected Versions Strong Testimonials versions prior to 3.3.9 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access or higher can inject arbitrary web...

CVE-2026-54565

rhwp is an HWP viewer and editor implemented in Rust and WebAssembly. Prior to rhwp 0.7.15 and rhwp Chrome and Firefox extension 0.2.4, the browser extensions use an all-URLs host permission to detect HWP and HWPX links on visited pages, but the service workers do not validate message senders, UR...