CVE-2023-39776

A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2023-39776

A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file...

Ticket Support Script Code Issue Vulnerability

Ticket Support Script is an affordable online help desk system. A security vulnerability exists in Ticket Support Script version v3.2. The vulnerability can be exploited by an attacker to execute arbitrary code by uploading a specially crafted file...

CVE-2023-38680

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. Thi...

GitLab 8.10 < 16.0.8 / 16.1.0 < 16.1.3 / 16.2.0 < 16.2.2 (CVE-2023-3385)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 8.10 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Under...

HTMLDOC buffer overflow vulnerability (CNVD-2023-65134)

HTMLDOC is an open source program that can convert HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. A buffer overflow vulnerability exists in HTMLDOC version 1.9.12, which stems from an issue found in the ps-pdf.cxx function parseparagraph that could allow code execution...

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists through the BLF file parser in the library, allowing an attacker to cause an application crash via maliciously crafted file...

Low: elfutils

Issue Overview: In elfutils 0.183, an infinite loop was found in the function handlesymtab in readelf.c .Which allows attackers to cause a denial of service infinite loop via crafted file. CVE-2021-33294 Affected Packages: elfutils Note: This advisory is applicable to Amazon Linux 2 AL2 Core...

The vulnerability of the phpMyFAQ web application lies in the absence of a mechanism to neutralize certain elements. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the phpMyFAQ web application is related to the absence of element neutralization mechanisms. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures using a specially crafted CSV file...

Heap-based Buffer Overflow

libjpeg.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to a heap-based buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp which allows an attacker to cause an application crash...

Campcodes Online Matrimonial Website System v3.3 - Code Execution via malicious SVG file upload

Exploit Title: Online Matrimonial Website System v3.3 - Code Execution via malicious SVG file upload Category: Web Application Exploit Author: Rajdip Dey Sarkar Version: 3.3 Tested on: Windows/Kali CVE: CVE-2023-39115 Description: ---------------- An arbitrary file upload vulnerability in Campcod...

CVE-2023-37732

Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file...

CVE-2023-22277

Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22317 and CVE-2023-22314...

CVE-2023-22317

CVE-2023-22317 concerns CX-Programmer versions 9.79 and earlier. The vulnerability is a use-after-free in the handling of a specially crafted CXP file, which can lead to information disclosure or arbitrary code execution. The available connected documents corroborate a use-after-free root cause a...

Omron CX-Programmer Resource Management Error Vulnerability

Omron CX-Programmer is a PLC Programmable Logic Controller programming software from Omron, Japan. A security vulnerability exists in Omron CX-Programmer version 9.79 and earlier, which stems from a post-release reuse vulnerability. The vulnerability can be exploited to allow a user to open a...

CVE-2023-3385

An issue has been discovered in GitLab affecting all versions starting from 8.10 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Under specific circumstances, a user importing a project 'from export' could access and read unrelated file...

CVE-2023-3385 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

An issue has been discovered in GitLab affecting all versions starting from 8.10 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Under specific circumstances, a user importing a project 'from export' could access and read unrelated file...

CVE-2023-3385

Removed by vendor...

CVE-2023-38560 Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name

An integer overflow flaw was found in pcl/pl/plfont.c:418 in plglyphname in ghostscript. This issue may allow a local attacker to cause a denial of service via transforming a crafted PCL file to PDF format...

Omron CX-One Resource Management Error Vulnerability

Omron CX-One is an integrated toolkit from Omron Japan. The product includes inverters, temperature controllers, and PLC programming software. A security vulnerability exists in Omron CX-One that stems from the presence of a Use-after-Free vulnerability, which could lead to information disclosure...