22 matches found
EUVD-2018-8891
Malware in sbrugna...
CVE-2025-9173
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The file upload in include/service/media.php verifies the file extension based on a list defined in...
CVE-2024-9173
The GF Custom Style plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, ...
Linux Distros Unpatched Vulnerability : CVE-2017-9173
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input- bmp.c:497:29. CVE-2017-9173 Note that Nessus relies on t...
CVE-2024-9173
creationtimestamp| type| source ---|---|--- 2024-09-26 12:57:30+00:00| seen| https://t.me/cvedetector/6402...
CVE-2024-9173 GF Custom Style <= 2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
The GF Custom Style plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, ...
CVE-2024-9173 GF Custom Style <= 2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
The GF Custom Style plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, ...
SUSE CVE-2017-9173
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:497:29...
Design/Logic Flaw
App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173...
CVE-2018-17113
App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173...
CVE-2015-9173
CVE-2015-9173 affects Android devices with Qualcomm Snapdragon Mobile chips (SD410/12, SD617, SD650/52, SD800, SD808, SD810). The issue is a missing return-value check in memscpy, leading to memory corruption in the TQS App. The vulnerability is tied to patches applied for the 2018-04-01/2018-04-...
GetSimple CMS 3.3.13 - Cross-Site Scripting
GetSimple CMS 3.3.13 - Cross-Site Scripting Exploit Title: GetSimple CMS 3.3.13 - Cross Site Scripting Vulnerability Google Dork: N/A Date: 03-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: http://get-simple.info/ Software Link:...
GetSimple CMS 3.3.13 Cross Site Scripting
Exploit Title: GetSimple CMS 3.3.13 - Cross Site Scripting Vulnerability Google Dork: N/A Date: 03-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: http://get-simple.info/ Software Link: http://get-simple.info/download/ Affected Version: 3.3.13...
GetSimple CMS 3.3.13 - Cross-Site Scripting
Exploit Title: GetSimple CMS 3.3.13 - Cross Site Scripting Vulnerability Google Dork: N/A Date: 03-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: http://get-simple.info/ Software Link: http://get-simple.info/download/ Affected Version: 3.3.13...
GetSimple CMS 3.3.13 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: GetSimple CMS 3.3.13 - Cross Site Scripting Vulnerability Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: http://get-simple.info/ Software Link: http://get-simple.info/download/ Affected...
CVE-2018-9173
Cross-site scripting XSS vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as demonstrated by the movieName parameter...
CVE-2018-9173
CVE-2018-9173 affects GetSimple CMS 3.3.13. A cross‑site scripting vulnerability exists in the SWF file used by the uploadify uploader: admin/template/js/uploadify/uploadify.swf . The root cause is an XSS via the movieName parameter, allowing remote attackers to inject arbitrary web script or HTM...
CVE-2017-9173
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:497:29...
CVE-2017-9173
CVE-2017-9173 affects AutoTrace 0.31.1: libautotrace.a (ReadImage in input-bmp.c:497:29) contains a heap-based buffer overflow. Exploitation could lead to arbitrary code execution or a denial of service. The connected documents (RH/NVD/CNVD/SUSE/PT/security feeds) confirm the issue but provide no...