CVE-2026-50787

CVE-2026-50787 — e-SIC Livre におけるリソース消費の制御不能 概要 e-SIC Livre esiclivre のCAPTCHA生成コンポーネントに、リソース消費の脆弱性が存在します。 影響を受けるエンドポイントは、CAPTCHA画像の寸法、フォントサイズ、描画する文字数を定義するユーザー制御パラメータを受け入れます。これらの値は、適切な境界チェックなしに使用されます。...

e-SIC Livre 0.2.2 Resource Consumption

e-SIC Livre versions 0.2.2 and below suffer from a resource consumption vulnerability in the CAPTCHA generation component. CVE-2026-50787 — Uncontrolled Resource Consumption in e-SIC Livre Summary A resource consumption vulnerability exists in the CAPTCHA generation component of e-SIC Livre...

e-SIC Livre 安全漏洞

e-SIC Livre is an open-source citizen information request system developed by esiclivre. Versions of e-SIC Livre prior to 0.2.2 contained security vulnerabilities. These vulnerabilities stemmed from improper handling of the cpfcnpj parameter in the Solicitante::resetaSenha function, which could...

EUVD-2017-6832

Malware in sbrugna...

EUVD-2017-6833

Malware in sbrugna...

EUVD-2017-6834

Malware in sbrugna...

EUVD-2017-6827

Malware in sbrugna...

EUVD-2017-6831

Malware in sbrugna...

EUVD-2024-21772

Malicious code in bioql PyPI...

CVE-2024-24350

File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component...

CVE-2017-15373

E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...

CVE-2024-24350

File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component...

CVE-2024-24350

File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component...

Unrestricted file upload

File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component...

Software Publico e-Sic Livre Code Issue Vulnerability

Software Publico e-Sic Livre is a solution from the Brazilian company Software Publico designed to manage public services based on Q&A. A code issue vulnerability exists in Software Publico e-Sic Livre v.2.0 and prior versions, which stems from the presence of a file upload vulnerability that cou...

CVE-2024-24350

File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component...

CVE-2024-24350

CVE-2024-24350 corresponds to a file upload vulnerability in Software Publico e-Sic Livre, affecting version 2.0 and earlier. The issue arises from the extension filtering component, enabling a remote attacker to upload crafted payloads that may lead to arbitrary code execution. The NVD/Red Hat a...

CVE-2024-24350

File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component...

CVE-2024-24350: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component...

PT-2024-20371 · Software Publico · E-Sic Livre

Name of the Vulnerable Software and Affected Versions: Software Publico e-Sic Livre versions 2.0 and earlier Description: The issue allows a remote attacker to execute arbitrary code via the extension filtering component. This is a result of a File Upload vulnerability. Recommendations: For...