Lucene search
+L

1015 matches found

Kitploit
Kitploit
added 2026/09/15 8:17 a.m.9 views

CVE-2024-53615

CVE-2024-53615 Karl Ward의 files.gallery v0.3.0 0.11.0에서 비디오 썸네일 렌더링 구성요소에 존재하는 명령 주입 취약점으로, 원격 공격자가 조작된 비디오 파일을 통해 임의 코드를 실행할 수 있습니다. 전제 조건: PATH에 ffmpeg가 있어야 함 config.php: 'allowupload' = true PHP 설정에서 exec가 활성화되어 있어야 함 취약점은 버전 0.9.12에서 가져온 다음 라인비디오 미리보기를 생성하는 부분에 있습니다: root@kitploit: $cmd =...

6.5CVSS5.9AI score0.01311EPSS
SaveExploits1References1
CVE
CVE
added 2026/09/15 1:20 a.m.10 views

CVE-2026-91772

Halo through version 2.26.1 is affected by an open redirect vulnerability in the anonymous thumbnail endpoint , which fails to validate the uri query parameter. This allows attackers to craft malicious links on a trusted Halo domain that redirect visitors to arbitrary external sites, enabling phi...

6.1CVSS0.00183EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/15 1:20 a.m.8 views

EUVD-2026-78248

Halo through 2.26.1 contains an open redirect vulnerability in the anonymous thumbnail endpoint that fails to validate the uri query parameter. Attackers can craft malicious links on the trusted Halo domain that redirect visitors to arbitrary external sites, enabling phishing attacks and abuse of...

6.1CVSS0.00183EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/15 12:00 a.m.6 views

PT-2026-91831

Halo through 2.26.1 contains an open redirect vulnerability in the anonymous thumbnail endpoint that fails to validate the uri query parameter. Attackers can craft malicious links on the trusted Halo domain that redirect visitors to arbitrary external sites, enabling phishing attacks and abuse of...

6.1CVSS0.00183EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/14 5:17 p.m.10 views

CVE-2023-44763_ConcreteCMS-Arbitrary-file-upload-Thumbnail

ConcreteCMS 格納型XSS v.9.2.1 作成者: Sergio 説明: ConcreteCMS v9.2.1 には任意ファイルアップロードの脆弱性が存在し、保存型クロスサイトスクリプティング(XSS)を可能にします。 攻撃ベクトル: 「Thumbnail」ファイルアップロードのサニタイズに脆弱性があり、非表示のアラートを伴うクロスサイトスクリプティング(XSS)を埋め込んだPDF / SVG / HTMLファイルをアップロードできます。 POC: パネルにログインしたら、ダッシュボードメニューの「Settings - Tags - Thumbnail」に移動します。...

5.4CVSS6.1AI score0.00585EPSS
SaveExploits1
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.6 views

Astra Linux – Vulnerability in libraw

LibRaw before 0.20-RC1 lacks a check for the thumbnail size range. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength is used without validating T.tlength...

7.5CVSS6.7AI score0.03672EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.14 views

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick version 7.0.11. In this version, an integer overflow in the WriteTHUMBNAILImage function in the coders/thumbnail.c file may lead to undefined behavior when processing a specially crafted image file submitted by an attacker. The greatest threat posed by this...

7.8CVSS7.5AI score0.0238EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.30 views

LG LED Assistant - Thumbnail Path Traversal File Upload

A path traversal vulnerability exists in the endpoint handler for /api/thumbnail in Common.js. An unauthenticated remote attacker can exploit this to upload arbitrary files to any location on the disk drive where the product is installed. id: CVE-2024-2863 info: name: LG LED Assistant - Thumbnail...

9.8CVSS5.9AI score0.63999EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.31 views

LG Supersign EZ CMS - Remote Code Execution

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsrserver/device/getThumbnail. id: CVE-2018-17173 info: name: LG Supersign EZ CMS - Remote Code Execution author: pussycat0x severity: critical description: | LG SuperSign CMS allows remote attackers...

9.8CVSS8.9AI score0.56237EPSS
SaveExploits9References4
Kitploit
Kitploit
added 2026/09/12 5:31 p.m.12 views

CVE-2025-32140

🚨 CVE-2025-32140 – WP Remote Thumbnail エクスプロイト 任意ファイルアップロード 📝 説明 CVE-2025-32140 は、WordPress 用 WP Remote Thumbnail プラグインにおける 重大な脆弱性 です。この脆弱性により、認証済み攻撃者 (投稿者以上の権限を持つ)は、サニタイズされていない URL を受け付ける欠陥のある機能を悪用して、Web シェル などの 任意のファイル をアップロードできます。 このプラグインは、指定された remotethumb URL...

9.9CVSS8AI score0.00542EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/10 7:19 p.m.8 views

CVE-2026-26833

CVE-2026-26833: thumbler における OS コマンドインジェクション 概要 thumbler のバージョン 1.1.2 以前では、lib/thumbler.js の thumbnail に OS コマンドインジェクションの脆弱性があります。このパッケージは input、output、time、size の値を単一の ffmpeg コマンド文字列に連結し、その文字列を childprocess.exec で実行します。これらの値のいずれかを制御できる攻撃者は、シェル構文を注入して任意のコマンドを実行できます。 影響を受ける製品...

9.8CVSS5.9AI score0.02308EPSS
SaveExploits4
NVD
NVD
added 2026/09/10 5:17 p.m.7 views

CVE-2026-73694

FileRun before 2026.3.0 contains an OS command injection vulnerability caused by a no-op redefinition of escapeshellcmd in CLI.php that strips shell-metacharacter escaping, allowing attacker-controlled input to reach an exec sink unsanitized. Attackers can exploit this through an interactive path...

8.6CVSS0.01806EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/05 6:37 a.m.9 views

EUVD-2026-71887

The Divi theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.27.6. This is due to the etpbsetvideooembedthumbnailresolution function using wpremoteget instead of wpsaferemoteget to fetch a remote image URL, which does not restrict requests to...

5CVSS5.7AI score0.00275EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/05 12:00 a.m.14 views

PT-2026-86329

The Divi theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.27.6. This is due to the et pb set video oembed thumbnail resolution function using wp remote get instead of wp safe remote get to fetch a remote image URL, which does not restrict...

5CVSS5.7AI score0.00275EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/02 11:39 p.m.7 views

GHSA-75MR-QW9X-3R39 Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling

Summary Mailpit's thumbnail endpoint decodes attacker-supplied image attachments into a full raster before checking any decoded-pixel, dimension, or memory budget. A remote client that can store an email and reach the default web API can supply a compact high-dimension image, then request...

7.5CVSS5.9AI score0.00371EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/02 11:39 p.m.17 views

EUVD-2026-63659

Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling...

5.3CVSS5.9AI score0.00371EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/02 2:55 p.m.15 views

EUVD-2026-68811

Kirby: Access to image files outside of the site root via path traversal in the media handling...

6.9CVSS5.8AI score0.00461EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/08/31 10:12 p.m.12 views

Kirby: Access to image files and limited access to JSON files outside of the site root via path traversal in the media handling

TL;DR This vulnerability affects all Kirby sites that are deployed to a server that allows requests for URLs with encoded slashes %2f, such as nginx, PHP's built-in server or Apache setups that have the option AllowEncodedSlashes enabled. It was possible to create and access thumbnails from media...

8.2CVSS6AI score0.00513EPSS
SaveExploits0References9Affected Software1
NVD
NVD
added 2026/08/31 9:17 p.m.10 views

CVE-2026-75592

Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler used incomplete filesystem containment checks in src/Filesystem/Dir.php and src/Filesystem/F.php through Kirby\Filesystem\Dir::realpath and Kirby\Filesystem\F::realpat...

6.9CVSS0.00461EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/31 9:17 p.m.10 views

CVE-2026-75594

Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler in src/Cms/Media.php allowed Kirby\Cms\Media::thumb to append a path-bearing filename to a validated parent media directory. On nginx, PHP's built-in server, or Apache...

8.2CVSS0.00513EPSS
SaveExploits0References7
Rows per page
Query Builder