9730 matches found
Clickjacking Leads To User Deletion
Hello team, on notrinoserp there is no clickjacking protection implemented x-frame-options, so an attacker can perform clickjacking attack, and in this case im able to delete user account via this vulnerability from the admin account, here is the POC: Exploit Script: iframe position:relative;...
clickjacking attack
Description clickjacking bug.\ I see there is no x-frame-options header set . So, the erp url can be loaded in iframe tag . which allow clickjacking attack Proof of Concept same this bellow code in html file and open this html url is browser . STUDY METERIAL...
Improper Input Validation
trafficserver is vulnerable to improper input validation. The vulnerability exist in HTTP/2 frame handling of Apache Traffic Server which allows an attacker to smuggle requests...
CVE-2022-37768
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...
CVE-2022-37768
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...
UBUNTU-CVE-2022-37768
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...
CVE-2022-37768
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...
CVE-2022-37768
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...
CVE-2022-37768
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...
CVE-2022-37768
The CVE-2022-37768 entry concerns the libjpeg project, where commit 281daa9 is reported to introduce an infinite loop in Frame::ParseTrailer. The issue affects libjpeg and has a high impact on availability (CVSS: 7.5, Network attack vector, no privileges required, no user interaction). Multiple c...
CVE-2022-37768
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...
libjpeg 安全漏洞
libjpeg is a C language library for processing JPEG format image data. It includes JPEG decoding, JPEG encoding, and other JPEG functions. A security vulnerability exists in libjpeg commit number: 281daa9 that stems from an infinite loop in its Frame::ParseTrailer component...
CVE-2022-37768: Loop with Unreachable Exit Condition
libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer...
CVE-2022-23747
In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback...
Sony Xperia 系列安全漏洞
The Sony Xperia series is a line of smartphones from the Japanese company Sony Sony. A security vulnerability exists in the Sony Xperia 1, 5, and Pro series versions, which stems from a lack of validation of the number of frames passed during music playback, which may result in memory access...
CVE-2022-35114
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via extractFrame at /readers/swf.c...
UBUNTU-CVE-2022-35114
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via extractFrame at /readers/swf.c...
SWFTools 缓冲区错误漏洞
SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a segmentation violation in the extractFrame of the /readers/swf.c file...
PT-2022-22581 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A segmentation violation was discovered in SWFTools via the extractFrame function at /readers/swf.c. Recommendations: At the moment, there is no information about a newer version that...