CVE-2024-28425

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...

PT-2024-22428

Name of the Vulnerable Software and Affected Versions greykite version 1.0.0 Description The issue allows attackers to execute arbitrary code via uploading a crafted file, exploiting an arbitrary file upload vulnerability in the load obj function at /templates/pickle utils.py. Recommendations For...

PT-2024-21409 · Greek Universities Network · Open Eclass

Name of the Vulnerable Software and Affected Versions: Greek Universities Network Open eClass versions 3.15 and earlier Description: The issue allows attackers to run arbitrary code via the upload of a crafted file to the "certbadge.php" endpoint. This enables potential exploitation for malicious...

ROS-2-1759

2.1759 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

PT-2024-2252 · Microsoft · Windows Compressed Folder +1

Name of the Vulnerable Software and Affected Versions: Windows Compressed Folder affected versions not specified Description: The issue is related to insufficient input validation in the Windows Compressed Folder component, which can be exploited by creating a specially crafted file. This allows ...

EulerOS 2.0 SP8 : audiofile (EulerOS-SA-2024-1255)

According to the versions of the audiofile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to...

PT-2024-2287

Name of the Vulnerable Software and Affected Versions Microsoft Defender affected versions not specified Description The issue concerns a security feature bypass in Microsoft Defender on Windows operating systems. The problem stems from errors in security configurations. Exploitation may allow an...

CVE-2024-23300: Use After Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution...

PT-2024-4352 · Google · Google Updator +1

Name of the Vulnerable Software and Affected Versions: Google Updator versions prior to 1.3.36.351 Description: The issue is related to inadequate access control in the Google Updator program, allowing an attacker to bypass discretionary access control using a specially crafted file. This could...

PT-2024-2185 · Microsoft · Edge For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. It may allow a remote attacker to conduct spoofing attacks using a specially...

BIT-GOLANG-2021-33196

In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count in an archive's header can cause a NewReader or OpenReader panic...

BIT-ODOO-2021-45071

Cross-site scripting XSS issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via crafted uploaded file names...

Simcenter Femap Buffer Overflow RCE

The vulnerability of the Simcenter Femap simulation application lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by allowing the user to open a specially crafted Catia MODEL file...

Memory corruption

A memory leak issue discovered in parseSWFTEXTRECORD in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file...

Buffer overflow

Buffer Overflow vulnerability in XNSoft NConvert 7.163 for Windows x86 allows attackers to cause a denial of service via crafted xwd file...

Libde265 Heap Buffer Overflow DoS

The vulnerability of the putqpel00fallback16 function in fallback-motion.cc in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to trigger a service failure using a specially created file...

CVE-2024-22532

Buffer Overflow vulnerability in XNSoft NConvert 7.163 for Windows x86 allows attackers to cause a denial of service via crafted xwd file...

CVE-2024-23605

A heap-based buffer overflow vulnerability exists in the GGUF library header.nkv functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-23496

A heap-based buffer overflow vulnerability exists in the GGUF library gguffreadstr functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-21802

A heap-based buffer overflow vulnerability exists in the GGUF library info-ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...