CVE-2024-26469

Server-Side Request Forgery SSRF vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows remote attackers to cause a denial of service DoS and escalate privileges via the url parameter in the postProcess method...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image zoom and other features. A security vulnerability previously existed in PrestaShop Product Designer version 1.178.36,...

CVE-2024-24307

Path Traversal vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage method...

PT-2024-20348 · Prestashop · Prestashop Product Designer Module

Name of the Vulnerable Software and Affected Versions: PrestaShop Product Designer module versions prior to 1.178.36 Description: The issue allows a remote attacker to escalate privileges and obtain sensitive information. This is achieved via the ajaxProcessCropImage method. Recommendations: For...

PT-2024-20345 · Prestashop · Prestashop Product Designer Module

Name of the Vulnerable Software and Affected Versions: PrestaShop Product Designer module versions prior to 1.178.36 Description: An issue in the Product Designer module for PrestaShop allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the...

CVE-2024-24307

A Path Traversal vulnerability exists in the Tunis Soft Product Designer (productdesigner) module for PrestaShop before version 1.178.36 . A remote attacker can exploit the ajaxProcessCropImage() method to escalate privileges and access sensitive information . To mitigate this risk, users are rec...

CVE-2024-26469

A Server-Side Request Forgery (SSRF) vulnerability exists in the Tunis Soft **

CVE-2024-26469: Cross-Site Request Forgery (CSRF)

Server-Side Request Forgery SSRF vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows remote attackers to cause a denial of service DoS and escalate privileges via the url parameter in the postProcess method...

CVE-2024-24307: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage method...

CVE-2024-24302: Deserialization of Untrusted Data

An issue was discovered in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess method...

CVE-2024-24302

The **Tunis Soft

Adobe Substance 3D Designer Out-of-Bounds Read Vulnerability (CNVD-2024-11672)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Substance 3D Designer 13.1.0 and earlier versions, which can be exploited by an attacker to execute arbitrary code on a system with the privileges of th...

Fancy Product Designer < 6.1.5 - Admin+ SQL Injection

Description The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by adminstrators. - Log in as an administrator, and visit /wp-admin/. - Add a Catalog Product in /wp-admin/admin.php?page=fancyproductdesigner - Sear...

Adobe Substance 3D Designer Buffer Overflow

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

CVE-2024-20750

Substance3D - Designer versions 13.1.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curre...

CVE-2024-20750

Substance3D - Designer versions 13.1.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curre...

Design/Logic Flaw

Substance3D - Designer versions 13.1.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curre...

CVE-2024-20750 Adobe Substance 3D Designer PICT Parsing Out-Of-Bounds Read Vulnerability

Substance3D - Designer versions 13.1.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curre...

CVE-2024-20750 Adobe Substance 3D Designer PICT Parsing Out-Of-Bounds Read Vulnerability

Substance3D - Designer versions 13.1.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curre...

CVE-2024-20750

CVE-2024-20750 affects Adobe Substance 3D Designer, specifically versions 13.1.0 and earlier. The vulnerability is an out-of-bounds read during parsing of a crafted file, which could cause a read past the end of an allocated memory structure and allow code execution in the context of the current ...