SUSE CVE-2021-39212

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

SUSE CVE-2022-32545

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior...

graphicsmagick:coder_SUN_fuzzer: Heap-buffer-overflow in ReadSUNImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6348811671044096 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderSUNfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

graphicsmagick:coder_PTIF_fuzzer: Use-of-uninitialized-value in AccumulateRGBA

Detailed Report: https://oss-fuzz.com/testcase?key=5601008342663168 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: AccumulateRGBA...

graphicsmagick:coder_RAS_fuzzer: Heap-buffer-overflow in ReadSUNImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4885054235213824 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderRASfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ...

CVE-2022-4341

A vulnerability has been found in csliuwy coder-chaingdut and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /back/index.php/user/User/?1. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been...

Cross site scripting

A vulnerability has been found in csliuwy coder-chaingdut and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /back/index.php/user/User/?1. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been...

PT-2022-26894 · Unknown · Csliuwy Coder-Chain Gdut

Name of the Vulnerable Software and Affected Versions: csliuwy coder-chain gdut affected versions not specified Description: A vulnerability has been found in csliuwy coder-chain gdut, classified as problematic. It affects an unknown functionality of the file "/back/index.php/user/User/?1". The...

coder-chain_gdut Cross-Site Scripting Vulnerability

coder-chaingdut is a binary image segmentation method based on lossless compression by the individual developer Wenyin Liu csliuwy. A security vulnerability exists in coder-chaingdut, which originates from an unknown function in file /back/index.php/user/User/?1, which is manipulated to cause...

CVE-2022-4341

CVE-2022-4341 affects the csliuwy coder-chain_gdut project. The vulnerability is a cross-site scripting (XSS) in an unknown functionality of /back/index.php/user/User/?1, caused by manipulation of that function. It can be exploited remotely and the exploit has been disclosed publicly (VDB-215095)...

CVE-2022-4341: Improper Neutralization

A vulnerability has been found in csliuwy coder-chaingdut and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /back/index.php/user/User/?1. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been...

graphicsmagick:coder_TIFF_fuzzer: Use-of-uninitialized-value in AccumulateRGB

Detailed Report: https://oss-fuzz.com/testcase?key=4862840762925056 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: AccumulateRGB...

graphicsmagick:coder_TXT_fuzzer: Use-of-uninitialized-value in ReadBlobString

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5515973755273216 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderTXTfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_TXT_fuzzer: Stack-buffer-overflow in ReadBlobString

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6346635882135552 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderTXTfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1...

graphicsmagick:coder_ICB_fuzzer: Heap-buffer-overflow in ReadBlob

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6148981382316032 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderICBfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

GraphicsMagick coders/png.c Heap Buffer Overflow DoS

The vulnerability of the coders/png.c component in the cross-platform library for working with graphics in GraphicsMagick is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause a service failure...

CVE-2022-2388

The WP Coder WordPress plugin before 2.5.3 does not have CSRF check in place when deleting code created by the plugin, which could allow attackers to make a logged in admin delete arbitrary ones via a CSRF attack...

CVE-2022-2388

The CVE-2022-2388 vulnerability affects the WP Coder WordPress plugin prior to version 2.5.3. The issue is a CSRF omission when deleting code created by the plugin, allowing an authenticated admin to delete arbitrary code via CSRF. Impact stated as I:H with no confidentiality impact and no availa...

CVE-2022-2388: Cross-Site Request Forgery (CSRF)

The WP Coder WordPress plugin before 2.5.3 does not have CSRF check in place when deleting code created by the plugin, which could allow attackers to make a logged in admin delete arbitrary ones via a CSRF attack...

graphicsmagick:coder_PTIF_fuzzer: Use-of-uninitialized-value in put1bitbwtile

Detailed Report: https://oss-fuzz.com/testcase?key=5892236503547904 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: put1bitbwtile gtStripConti...