LG LED Assistant - Thumbnail Path Traversal File Upload

A path traversal vulnerability exists in the endpoint handler for /api/thumbnail in Common.js. An unauthenticated remote attacker can exploit this to upload arbitrary files to any location on the disk drive where the product is installed. id: CVE-2024-2863 info: name: LG LED Assistant - Thumbnail...

CVE-2024-53615

CVE-2024-53615 A command injection vulnerability in the video thumbnail rendering component of Karl Ward's files.gallery v0.3.0 through 0.11.0 allows remote attackers to execute arbitrary code via a crafted video file. Prerequisites: ffmpeg in PATH config.php: 'allowupload' = true exec must be...

CVE-2026-119719

A flaw was found in Blender. This vulnerability may allow arbitrary code execution or cause an application crash resulting in a Denial of Service DoS. By convincing a user to preview a specially crafted blend file with invalid image dimensions, an attacker can trigger an integer overflow in the...

CVE-2026-26833

CVE-2026-26833: OS command injection in thumbler Summary thumbler through version 1.1.2 allows OS command injection in thumbnail in lib/thumbler.js. The package concatenates the input, output, time, and size values into a single ffmpeg command string and executes that string with childprocess.exe...

EUVD-2026-114124

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extractor caused by 32-bit integer overflow in thumbdataverticalflip. Attackers can craft a .blend file with malicious TEST block dimensions that trigger an out-of-bounds write whe...

CVE-2026-119719

Blender versions before 4.5.15 and 5.x before 5.2.3 are vulnerable to a heap buffer overflow within the blend file thumbnail extractor. The root cause is a 32-bit integer overflow in the thumb_data_vertical_flip() function. An attacker can craft a malicious .blend file with specific TEST block di...

LG Supersign EZ CMS - Remote Code Execution

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsrserver/device/getThumbnail. id: CVE-2018-17173 info: name: LG Supersign EZ CMS - Remote Code Execution author: pussycat0x severity: critical description: | LG SuperSign CMS allows remote attackers...

CVE-2026-119719: Blender Foundation Blender: Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail…

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extractor caused by 32-bit integer overflow in thumbdataverticalflip. Attackers can craft a .blend file with malicious TEST block dimensions that trigger an out-of-bounds write whe...

PT-2026-133653

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extractor caused by 32-bit integer overflow in thumb data vertical flip. Attackers can craft a .blend file with malicious TEST block dimensions that trigger an out-of-bounds write...

CVE-2025-32140

🚨 CVE-2025-32140 – WP Remote Thumbnail Exploit Arbitrary File Upload 📝 Description CVE-2025-32140 is a critical vulnerability in the WP Remote Thumbnail plugin for WordPress. It enables authenticated attackers with contributor or higher permissions to upload arbitrary files , such as web shells ,...

CVE-2026-114723

A flaw was found in Roundcube Webmail. A remote attacker can cause a Denial of Service DoS by submitting a crafted image with excessively large dimensions. When thumbnail generation falls back to the GD graphics library on non-Windows platforms, available-memory checks are not enforced. This allo...

CVE-2023-44763_ConcreteCMS-Arbitrary-file-upload-Thumbnail

ConcreteCMS Stored XSS v.9.2.1 Author: Sergio Description: ConcreteCMS v9.2.1 is affected by Arbitrary File Upload vulnerability which allows Cross-Site Scriting XSS stored. Attack Vectors: A vulnerability in "Thumbnail" file upload sanitation allows you to upload a PDF / SVG /HTML file with hidd...

Maian Gallery authenticated admin upload PHP webshell RCE

Admin login then cmd=addimages thumb upload writes picN-cat.php under content/galleries///. """Maian Gallery admin thumbnail upload PHP webshell RCE.""" from future import annotations import re import uuid from urllib.parse import quote, urlencode from kittysploit import from...

A Category-Selective Encryption Framework for Privacy Protection of UAV Images

Imagery captured by unmanned aerial vehicle UAV systems increasingly raises privacy concerns, as UAV aerial surveillance routinely captures sensitive objects such as pedestrians and vehicles alongside ordinary scene content. Existing privacy-preserving approaches typically employ class-agnostic...

SUSE-SU-2026:4895-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2026-82328: undersized palette memory allocations in the ICO loader can cause heap out-of-bounds reads bsc1277618. - CVE-2026-82343: improper channel-count handling in the PSD loader can cause heap and stack out-of-bounds reads bsc1277622. -...

Exploit for CVE-2026-112403

CVE-2026-112403: Pillow Heap Buffer Overflow via Lossless JPEG...

UBUNTU-CVE-2026-114723

Fix ImageMagick resource limits bypass by GD fallback during thumbnail generation...

mailpit -- Unbounded CPU and memory consumption in thumbnail endpoint via cyclic EXIF IFD chain

Mailpit author reports: The thumbnail endpoint GET /api/v1/message/ID/part/PartID/thumb parses EXIF metadata of image attachments with github.com/rwcarlsen/goexif to apply orientation. goexif's TIFF IFD walker only detects a self-referencing IFD next == prev. An attachment whose IFD chain forms a...

FreeBSD : mailpit -- Unbounded CPU and memory consumption in thumbnail endpoint via cyclic EXIF IFD chain (df4083bc-cea6-11f1-94b3-10ffe07f9334)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the df4083bc-cea6-11f1-94b3-10ffe07f9334 advisory. Mailpit author reports: The thumbnail endpoint GET /api/v1/message/ID/part/PartID/thumb parses EXIF...

SUSE CVE-2026-114723

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcubeimage falls back to GD, the available-memory check was applied only on Windows, so on other platforms a crafted image with large dimensions was...