CVE-2018-10255

CVE-2018-10255 affects clustercoding Blog Master Pro v1.0 with a CSV Injection flaw that lets a user with low privileges inject commands into exported CSVs, potentially enabling code execution. Exploitation details are provided in PoC/articles (e.g., PoC showing commands like cmd|'/C calc'). Root...

CVE-2018-10255

A CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code execution...

Blog Master Pro 1.0 - CSV Injection

Exploit Title: Blog Master Pro v1.0 - CSV Injection Date: 2018-04-23 Exploit Author: 8bitsec CVE: CVE-2018-10255 Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/blog-master-pro/21689781 Version: 1.0 Tested on: Kali Linux 2.0 | Mac OS 10.13 Release Date:...

Updated elfutils packages fix security vulnerabilities

The elfutils package has been updated to version 0.169 to fix several bugs that can lead to memory allocation failures or heap overflows CVE-2016-10254, CVE-2016-10255, CVE-2017-7607, CVE-2017-7608, CVE-2017-7609, CVE-2017-7610, CVE-2017-7611, CVE-2017-7612, CVE-2017-7613...

GLSA-201710-10 : elfutils: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201710-10 elfutils: Multiple vulnerabilities Multiple vulnerabilities have been discovered in elfutils. Please review the referenced CVE identifiers for details. Impact : A remote attacker could possibly cause a Denial of Service...

CVE-2017-10255

CVE-2017-10255 affects Oracle PeopleSoft Enterprise PRTL Interaction Hub (EPPCM_HIER_TOP) in version 9.1.0. A remote attacker can authenticate over HTTP to read, update, insert, or delete data; exploitation requires user interaction. Root cause is in the EPRTL Interaction Hub subcomponent, enabli...

CVE-2016-10255

The libelfsetrawdatawrlock function in elfgetdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service crash via a crafted 1 shoff or 2 shsize ELF header value, which triggers a memory allocation failure...

CVE-2016-10255

Elfutils: CVE-2016-10255 affects the __libelf_set_rawdata_wrlock path in elf_getdata.c, where crafted sh_off/sh_size ELF header values can trigger a memory allocation failure and crash. This corresponds to memory allocation issues that enable a Denial of Service via a crafted ELF file. Affected p...

CVE-2016-10255

The libelfsetrawdatawrlock function in elfgetdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service crash via a crafted 1 shoff or 2 shsize ELF header value, which triggers a memory allocation failure...