CVE-2024-1906 Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxAddCategory

The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxAddCategory function. This makes it possible for unauthenticated attackers to add categories via...

CVE-2024-20730 TALOS-2023-1906 - Adobe Acrobat Reader Font CPAL integer overflow vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

Malicious code in wlwz-2312-1906 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c425923b074a37bf58cf19821bf47b9c162589170c470a1b3415ad2228df7a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Amazon Linux AMI : kernel (ALAS-2024-1906)

The version of kernel installed on the remote host is prior to 4.14.336-178.554. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1906 advisory. An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue coul...

USN-6200-1: ImageMagick vulnerabilities

It was discovered that ImageMagick incorrectly handled the "-authenticate" option for password-protected PDF files. An attacker could possibly use this issue to inject additional shell commands and perform arbitrary code execution. This issue only affected Ubuntu 20.04 LTS. CVE-2020-29599 It was...

Fedora 37 : ImageMagick (2023-541c04817f)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-541c04817f advisory. Update ImageMagick to 6.9.12.86 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

MGASA-2023-0161 Updated imagemagick packages fix security vulnerability

A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of...

Medium: ImageMagick

Issue Overview: Possible heap-based buffer overflow attack in ImportMultiSpectralQuantum in MagickCore/quantum-import.c for ImageMagick CVE-2023-1906 Affected Packages: ImageMagick Issue Correction: Run dnf update ImageMagick --releasever 2023.0.20230503 or dnf update --advisory ALAS2023-2023-170...

Important: Red Hat Security Advisory: java-1.8.0-openjdk security update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2023:1927-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1927-1 advisory. - CVE-2023-1906: Fixed a heap-based buffer overflow in ImportMultiSpectralQuantum. bsc1210308 Tenable has...

SUSE-SU-2023:1927-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2023-1906: Fixed a heap-based buffer overflow in ImportMultiSpectralQuantum. bsc1210308...

CVE-2023-1906

creationtimestamp| type| source ---|---|--- 2023-04-13 02:29:39+00:00| seen| https://t.me/cibsecurity/62043...

CVE-2023-1906

A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of servi...

CVE-2023-1906

ImageMagick vulnerability CVE-2023-1906 is a heap-based buffer overflow in ImportMultiSpectralQuantum() (MagickCore/quantum-import.c). A crafted file can trigger an out-of-bounds read, causing an application crash and denial of service. Affected software is ImageMagick; root cause is a malformed ...

CVE-2023-1906

A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of servi...

Amazon Linux 2 : unzip (ALAS-2023-1906)

The version of unzip installed on the remote host is prior to 6.0-57. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1906 advisory. A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null...

CVE-2022-1906

creationtimestamp| type| source ---|---|--- 2022-08-01 16:17:10+00:00| seen| https://t.me/cibsecurity/47328...

CVE-2022-1906 Copyright Proof <= 4.16 - Reflected Cross-Site-Scripting

The Copyright Proof WordPress plugin through 4.16 does not sanitise and escape a parameter before outputting it back via an AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting when a specific setting is enabled...

CVE-2022-1906

CVE-2022-1906 affects the WordPress Copyright Proof plugin (versions ≤4.16). The issue arises because a parameter is not sanitized/escaped before being echoed via an AJAX action reachable by both unauthenticated and authenticated users when a specific setting is enabled, enabling Reflected Cross-...

Backdoor.Win32.Verify.h Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/82641dabbb1f73dd775e200466a07ec1.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Verify.h Vulnerability: Unauthenticated Remote Command Execution Description: The...