zanllp

Products

ProductCVEsExploitedLatest
infinite-image-browsing2–Aug 21, 2026

Exploited and recent CVEs

  • CVE-2026-77815 High 7.5 Infinite Image Browsing Resolves Paths With normpath, Allowing Symlink Escape From Scanned Directories 0.5%
  • CVE-2026-77814 High 7.5 Infinite Image Browsing is_path_trusted Prefix Comparison Omits the Trailing Path Separator 0.5%