CVE-2024-20753

Photoshop Desktop versions 24.7.3, 25.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...

CVE-2024-20753

Adobe Photoshop Desktop (Windows/macOS) is affected by CVE-2024-20753, an out-of-bounds read in PDF/file parsing that could allow code execution in the context of the current user. Affected versions include 24.7.3, 25.7 and earlier; exploitation requires the user to open a crafted file. Several c...

CVE-2024-20753 Adobe Photoshop PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

Photoshop Desktop versions 24.7.3, 25.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...

Adobe Photoshop Buffer Error Vulnerability

Adobe Photoshop is a suite of image processing software from the American company Audobee Adobe. The software is primarily used to process images. A buffer error vulnerability exists in Adobe Photoshop Desktop, which arises from an out-of-bounds read vulnerability when parsing a carefully crafted...

CVE-2024-31777

CVE-2024-31777 is a file-upload vulnerability in OpenEclass (GUnet OpenEclass E-learning) affecting version 3.15 and earlier. The issue allows an attacker to execute arbitrary code by uploading a crafted file to the certbadge.php endpoint, enabling remote code execution with the ability to write/...

CVE-2024-1495

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.1 prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. It was possible for an attacker to cause a denial of service using maliciously crafted file...

UBUNTU-CVE-2024-1495

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.1 prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. It was possible for an attacker to cause a denial of service using maliciously crafted file...

CVE-2024-1495 Uncontrolled Resource Consumption in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.1 prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. It was possible for an attacker to cause a denial of service using maliciously crafted file...

GitLab CE/EE Security Vulnerabilities

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab CE/EE, which stems from the possibility that...

PT-2024-4225 · Adobe · Audition

Name of the Vulnerable Software and Affected Versions: Adobe Audition versions 24.2, 23.6.4 and earlier Description: The issue is related to NULL Pointer Dereference errors. Exploitation of this issue could allow an attacker to cause a denial-of-service condition by crashing the application. This...

CVE-2024-34832

Directory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute arbitrary code via a crafted file uploaded to the g and node parameters...

CVE-2024-34832

CVE-2024-34832 is a directory traversal vulnerability in CubeCart v6.5.5 and earlier that enables arbitrary code execution via crafted uploads to the _g and node parameters. Multiple sources describe the flaw: the admin panel can be abused to include .inc.php files located anywhere on the server,...

PT-2024-27157 · Unknown · Monstra Cms

Name of the Vulnerable Software and Affected Versions: Monstra CMS version 3.0.4 Description: An arbitrary file upload issue allows attackers to execute arbitrary code via uploading a crafted PHP file. Recommendations: For Monstra CMS version 3.0.4, at the moment, there is no information about a...

Devellion CubeCart Security Breach

Devellion CubeCart is a free and open source e-commerce shopping cart software from the company of Devellion UK. The software supports selling products, adding/editing products or images in an online store, etc. A security vulnerability exists in Devellion CubeCart v.6.5.5 and earlier versions,...

The vulnerability of Veritas System Recovery’s backup and recovery software, related to errors in permission handling, allows attackers to escalate their privileges.

The vulnerability of Veritas System Recovery’s backup and recovery software lies in its error handling of permissions. Exploiting this vulnerability can allow an attacker to enhance their privileges by creating a specially crafted file at any location within the file system...

CVE-2024-36858

An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file...

Serendipity 2.5.0 - Remote Code Execution Exploit

Exploit Title: Serendipity 2.5.0 - Remote Code Execution RCE Discovered by: Ahmet Ümit BAYRAM Vendor Homepage: https://docs.s9y.org/ Software Link:https://www.s9y.org/latest Tested Version: v2.5.0 latest Tested on: MacOS import requests import time import random import string from bs4 import...

RHEL 7 : gedit (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gedit: CPU consumption via crafted file CVE-2017-14108 Note that Nessus has not tested for this issue but has inste...

RHEL 6 : nasm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - nasm: use-after-free in pastetokens in asm/preproc.c CVE-2019-8343 - In Netwide Assembler NASM 2.14rc0,...

RHEL 7 : qpdf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - qpdf: stack exhaustion in QPDFObjectHandle and QPDFDictionary classes in libqpdf.a CVE-2018-9918 - An iss...