Lucene search
+L

3352 matches found

CNNVD
CNNVD
added 2023/08/21 12:00 a.m.11 views

BoidCMS 代码问题漏洞

BoidCMS is a free open source flat file CMS for building simple websites and blogs, developed in PHP and using JSON as the database. A code issue vulnerability exists in BoidCMS version v.2.0.0, which originates from a vulnerability that allows remote attackers to execute arbitrary code via the G...

8.8CVSS8.6AI score0.76276EPSS
SaveExploits8References6
Cvelist
Cvelist
added 2023/08/21 12:00 a.m.72 views

CVE-2023-38836

File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks...

9.1AI score0.76276EPSS
SaveExploits8References2
GithubExploit
GithubExploit
added 2023/08/16 2:30 p.m.625 views

Exploit for Unrestricted Upload of File with Dangerous Type in Boidcms

CVE-2023-38836 Exploit File Upload vulnerability in BoidCMS v...

8.8CVSS8.6AI score0.76276EPSS
SaveExploits8
Positive Technologies
Positive Technologies
added 2023/08/16 12:00 a.m.11 views

PT-2023-26619 · Boidcms · Boidcms

Name of the Vulnerable Software and Affected Versions: BoidCMS version 2.0.0 Description: A remote attacker can execute arbitrary code by exploiting a file upload vulnerability in BoidCMS. This is achieved by adding a GIF header to bypass MIME type checks, allowing the attacker to execute code vi...

8.8CVSS8.9AI score0.76276EPSS
SaveExploits8References13
NVD
NVD
added 2023/08/11 2:15 p.m.26 views

CVE-2020-24221

An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service DoS via crafted .gif file infinite loop...

5.5CVSS5.3AI score0.00321EPSS
SaveExploits1References1
OSV
OSV
added 2023/08/11 2:15 p.m.16 views

CVE-2020-24221

An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service DoS via crafted .gif file infinite loop...

5.5CVSS6.8AI score
SaveExploits0References1
Prion
Prion
added 2023/08/11 2:15 p.m.22 views

Design/Logic Flaw

An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service DoS via crafted .gif file infinite loop...

1.9CVSS5.3AI score0.00321EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/08/11 12:00 a.m.9 views

ngiflib Security Vulnerabilities

ngiflib is a GIF image format decoding library written in C. It can be used to decode GIF images. A security vulnerability exists in miniupnp ngiflib version 0.4, which originates from a security flaw in the GetByte function. An attacker can exploit this vulnerability to cause a Denial of Service...

5.5CVSS6.8AI score0.00321EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/08/11 12:00 a.m.45 views

CVE-2020-24221

An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service DoS via crafted .gif file infinite loop...

5.3AI score0.00321EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/08/02 11:15 p.m.6 views

CVE-2023-39114

ngiflib commit 84a75 was discovered to contain a segmentation violation via the function SDLLoadAnimatedGif at ngiflibSDL.c. This vulnerability is triggered when running the program SDLaffgif...

5.5CVSS6.1AI score0.00273EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/08/02 12:00 a.m.9 views

ngiflib Security Vulnerabilities

ngiflib is a library for decoding the GIF image format written in C. It has a vulnerability that stems from a segmentation error in the main method of the gif2tag.c file. A security vulnerability exists in ngiflib, which is caused by a segmentation error in the main method of the gif2tag.c file...

5.5CVSS6.8AI score0.00273EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/08/02 12:00 a.m.9 views

ngiflib Security Vulnerabilities

ngiflib is a library for decoding the GIF image format written in C. The vulnerability exists in ngiflibSDL.c file. A security vulnerability exists in ngiflib, which stems from a segmentation error in the SDLLoadAnimatedGif method of the ngiflibSDL.c file...

5.5CVSS6.8AI score0.00273EPSS
SaveExploits1References2
OSV
OSV
added 2023/07/19 5:15 p.m.9 views

CVE-2023-37748

ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c...

5.5CVSS5.8AI score0.0028EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/07/19 5:15 p.m.5 views

CVE-2023-37748

ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c...

5.5CVSS6AI score0.0028EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/07/19 12:00 a.m.7 views

ngiflib 安全漏洞

ngiflib is a GIF image format decoding library written in C. A security vulnerability exists in ngiflib, which stems from the DecodeGifImg function in the file ngiflib.c containing an infinite loop...

5.5CVSS5.6AI score0.0028EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/07/17 7:15 p.m.7 views

CVE-2022-30858

An issue was discovered in ngiflib 0.4. There is SEGV in SDLLoadAnimatedGif when use SDLaffgif. poc : ./SDLaffgif CAfile20...

6.5CVSS6.6AI score0.00616EPSS
SaveExploits1References3
NVD
NVD
added 2023/07/17 4:15 p.m.23 views

CVE-2023-3614

Mattermost fails to properly validate a gif image file, allowing an attacker to consume a significant amount of server resources, making the server unresponsive for an extended period of time by linking to specially crafted image file...

4.3CVSS0.00351EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/17 4:15 p.m.25 views

Code injection

Mattermost fails to properly validate a gif image file, allowing an attacker to consume a significant amount of server resources, making the server unresponsive for an extended period of time by linking to specially crafted image file...

1.9CVSS4.2AI score0.00351EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/17 3:32 p.m.29 views

CVE-2023-3614 Denial of Service via specially crafted gif image

Mattermost fails to properly validate a gif image file, allowing an attacker to consume a significant amount of server resources, making the server unresponsive for an extended period of time by linking to specially crafted image file...

4.3CVSS4.9AI score0.00351EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/17 3:32 p.m.18 views

CVE-2023-3614 Denial of Service via specially crafted gif image

Mattermost fails to properly validate a gif image file, allowing an attacker to consume a significant amount of server resources, making the server unresponsive for an extended period of time by linking to specially crafted image file...

4.3CVSS5.9AI score
SaveExploits0References3
Rows per page
Query Builder