Crater-CVE-2023-46865-RCE

Crater-CVE-2023-46865-RCE Crater =6.0.6, CVE-2023-46865 RCE posterior a la autenticación Superadmin Descripción de la Vulnerabilidad Crater Invoice es vulnerable a la subida de archivos sin restricciones con tipos peligrosos debido a la falta de validación adecuada de entrada. La clase de...

CVE-2023-46865

/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image...

CVE-2023-46865: Improper Control of Generation of Code

/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image...

[ MDVSA-2015:090 ] libpng

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:090 http://www.mandriva.com/en/support/security/ Package : libpng Date : March 28, 2015 Affected: Business Server 2.0 Problem Description: Updated libpng package fixes security vulnerabilities: The...

libpng 1.6.15 Heap Overflow Exploit

Exploit for linux platform in category local exploits / Alex Eubanks email protected libpng 1.6.15 heap overflow 18 December 2014 / / A foreword / // this bug was found with american fuzzy lop! thanks lcamtuf! / We will trigger a call to zlib which will decompress data from an IDAT chunk into a...

Updated libpng package fixes security vulnerability

The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero CVE-2014-0333...

CVE-2014-0333

The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero...

Design/Logic Flaw

The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero...

CVE-2014-0333

The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero...

CVE-2014-0333

CVE-2014-0333 affects libpng 1.6.x up to 1.6.9. The PNG progressive decoder’s png_push_read_chunk in pngpread.c can enter an infinite loop and cause CPU exhaustion when it processes an IDAT chunk of length zero, enabling a denial of service via a remote attacker. The issue is tied to the png_push...

CVE-2002-0728: Undefined Security Weakness

Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to cause a denial of service crash via a PNG data stream that has more IDAT data than indicated by the IHDR chunk...