EUVD-2017-0044

Malware in sbrugna...

SUSE CVE-2017-14857

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

WordPress Plugin Code Injection Vulnerability (CNVD-2021-59600)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress plugin Browser Screenshots has a code injecti...

CVE-2021-24439

The Browser Screenshots WordPress plugin before 1.7.6 allowed authenticated users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks as the imageclass parameter of the browser-shot shortcode was not escaped...

CVE-2021-24439

The Browser Screenshots WordPress plugin before 1.7.6 allowed authenticated users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks as the imageclass parameter of the browser-shot shortcode was not escaped...

PT-2021-15967

Name of the Vulnerable Software and Affected Versions Browser Screenshots WordPress plugin versions prior to 1.7.6 Description The issue allows authenticated users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks. This is due to the image class parameter of the...

CVE-2017-14857

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

Design/Logic Flaw

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

PYSEC-2017-130

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

CVE-2017-14857

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

PT-2017-19367

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is caused by an invalid free in the Image class in image.cpp, which results in a Segmentation fault. A crafted input can lead to a denial of service attack. Recommendations For Exiv2 version 0.26, at th...

CVE-2017-14857: Use After Free

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

CVE-2017-14857

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

CVE-2017-14857

Exiv2 0.26 contains an invalid free in Image::printIFDStructure (image.cpp) causing a segmentation fault that can lead to denial of service. Public advisories (Mageia/ENISA OSV) confirm this CVE-2017-14857 issue and note that fixes were delivered in newer Exiv2 packages (e.g., MGA6 patch) and adv...

CVE-2017-14857

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

CVE-2017-14857

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

Exiv2 Image Class Denial of Service Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides fast and easy reading and writing of image metadata in a variety of EXIF, IPTC and XMP formats. A security vulnerability exists in the Image class of the...

PT-2017-13729

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is caused by an invalid free in the Image class in image.cpp, which can lead to a Segmentation fault. A crafted input can exploit this, resulting in a denial of service attack. Recommendations For Exiv2...

Oracle Java Image ColorConvert Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java Runtime Environment. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

migcms-rfi.txt

┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...