CVE-2025-1169

SourceCodester Image Compressor Tool 1.0 contains a cross-site scripting flaw in /image-compressor/compressor.php triggered by manipulating the image parameter. The vulnerability affects unknown processing and can be exploited remotely; public disclosures exist. Some sources note a practical work...

CVE-2025-1169 SourceCodester Image Compressor Tool compressor.php cross site scripting

A vulnerability was found in SourceCodester Image Compressor Tool 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /image-compressor/compressor.php. The manipulation of the argument image leads to cross site scripting. The attack may be initiated...

PT-2025-6143 · Sourcecodester · Sourcecodester Image Compressor Tool

Name of the Vulnerable Software and Affected Versions: SourceCodester Image Compressor Tool version 1.0 Description: A problem has been found in the processing of the file /image-compressor/compressor.php, which can lead to cross site scripting when the image argument is manipulated. The attack c...

SourceCodester Image Compressor Tool 跨站脚本漏洞

SourceCodester Image Compressor Tool is an open source image compression tool from Sourcecodester. A cross-site scripting vulnerability exists in SourceCodester Image Compressor Tool version 1.0, which stems from an incorrect manipulation of the parameter image that can lead to cross-site scripti...

CVE-2022-39224

Arr-pm is an RPM reader/writer library written in Ruby. Versions prior to 0.0.12 are subject to OS command injection resulting in shell execution if the RPM contains a malicious "payload compressor" field. This vulnerability impacts the extract and files methods of the RPM::File class of this...

CVE-2024-28028

Improper input validation in some IntelR Neural Compressor software before version v3.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-22476

Improper input validation in some IntelR Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access...

CVE-2024-39766

Improper neutralization of special elements used in SQL command in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Moderate: bzip2 security update

The bzip2 packages contain a freely available, high-quality data compressor. It provides both standalone compression and decompression utilities, as well as a shared library for use with other programs. Security Fixes: bzip2: bzip2: Data integrity error when decompressing with data integrity test...

CVE-2024-37181

Time-of-check time-of-use race condition in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable information disclosure via adjacent access...

CVE-2024-37181

Time-of-check time-of-use race condition in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable information disclosure via adjacent access...

CVE-2024-37181

Time-of-check time-of-use race condition in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable information disclosure via adjacent access...

CVE-2024-37181

The CVE-2024-37181 issue affects Intel® Neural Compressor software before version v3.0. It is a time-of-check time-of-use race condition that can allow an authenticated user to potentially disclose information via adjacent access. The advisory and multiple security feeds confirm the affected comp...

Intel Neural Compressor 安全漏洞

Intel Neural Compressor is an open source project from Intel Corporation USA designed to help developers easily optimize AI models. A security vulnerability exists in versions prior to Intel Neural Compressor v3.0 that stems from the presence of a competitive condition that could allow...

The vulnerability of the library for optimizing machine learning models in Intel Neural Compressor lies in the failure to take measures to neutralize special elements in the template creation mechanism. This allows attackers to enhance their privileges.

The vulnerability of the Intel Neural Compressor library for optimizing machine learning models is related to the lack of measures taken to neutralize special elements in the template creation mechanism. Exploiting this vulnerability can allow a remote attacker to enhance their privileges...

The vulnerability of the library for optimizing machine learning models in Intel Neural Compressor allows attackers to exploit it by bypassing security measures related to SQL query structures, thereby enabling them to enhance their privileges.

The vulnerability of the Intel Neural Compressor library for optimizing machine learning models is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the library for optimizing machine learning models in Intel Neural Compressor allows attackers to exploit it to increase their privileges. This vulnerability stems from insufficient validation of input data.

The vulnerability of the library for optimizing machine learning models in Intel Neural Compressor is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Intel Neural Compressor < 3.0 Multiple Vulnerabilities

The version of Intel Neural Compressor installed on the remote host is prior to 3.0. It is, therefore, affected by the following: - Improper neutralization of special elements used in an SQL command 'SQL Injection' in some Intel Neural Compressor software before version v3.0 may allow an...

The vulnerability of the library for optimizing machine learning models, Intel Neural Compressor, related to errors in processing input data, allows attackers to exploit it to gain increased privileges.

The vulnerability of the Intel Neural Compressor library for optimizing machine learning models is related to errors in processing input data. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

CVE-2024-39766

Improper neutralization of special elements used in SQL command in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via local access...