Gimp: Stack-based buffer overflow in SphereDesigner plug-in

Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long "Number of lights" field in a...

Gimp: Stack-based buffer overflow in Lighting plug-in

Stack-based buffer overflow in the loadpresetresponse function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long Position field...

CVE-2011-0741

Multiple cross-site scripting XSS vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 installer or 2 image editor...

Sitefinity CMS - ASP.NET Arbitrary File Upload

Sitefinity CMS - ASP.NET Arbitrary File Upload ============================================================= Sitefinity CMS ASP.NET Shell Upload Vulnerability ============================================================= Exploit Title: Sitefinity CMS ASP.NET Shell Upload Vulnerability DDate:...

Joomla! Component com_mtree 2.1.5 - Arbitrary File Upload

Exploit Title: Joomla Component Mosets Tree 2.1.5 Shell Upload Vulnerability Date: 6 September 2010 Author: jdc Software Link: http://www.mosets.com/tree/ Version: 2.1.5 Patched: 2.1.6 Tested on: PHP5, MySQL5 Mosets Tree suffers from a shell upload vulnerabilty caused by improperly checking the...

Nokia N95-8 (JPG File) Remote Crash PoC

No description provided by source. Application: Nokia N95-8 OS: Symbian ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description The nokia n95 is a smartphone, this phone have more...

Nokia N95-8 (JPG File) Remote Crash PoC

Exploit for hardware platform in category dos / poc ======================================= Nokia N95-8 JPG File Remote Crash PoC ======================================= Application: Nokia N95-8 OS: Symbian ------------------------------------------------------ 1 - Description 2 - Vulnerability 3...

EasySite 2.0 - 'image_editor.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

PT-2007-4982 · Gnu +1 · Gimp +1

Name of the Vulnerable Software and Affected Versions: GIMP affected versions not specified Description: The issue allows user-assisted remote attackers to cause a denial of service, resulting in a crash or memory consumption, via crafted image files. This is related to the psp, bmp, pcx, and psd...

Stack overflow in gimp's sunras plugin

Stack-based buffer overflow in the setcolortable function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file...

CVE-2005-4672

Cross-site scripting XSS vulnerability in image-editor-52/index.php in CityPost Simple Image-Editor 0.52 allows remote attackers to inject arbitrary web script or HTML via the 1 m1, 2 m2, 3 m3, 4 imgsrc, and 5 m4 parameter...

CVE-2005-4672

The CVE-2005-4672 entry describes a cross-site scripting (XSS) flaw in CityPost Simple Image-Editor 0.52, specifically in image-editor-52/index.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML via one of five parameters: m1, m2, m3, imgsrc, or m4. The affected...

CVE-2005-4672

Cross-site scripting XSS vulnerability in image-editor-52/index.php in CityPost Simple Image-Editor 0.52 allows remote attackers to inject arbitrary web script or HTML via the 1 m1, 2 m2, 3 m3, 4 imgsrc, and 5 m4 parameter...

citypostXSS.txt

sNKenjoi's Security Advisory: XSS Vunerabilities in Multiple CityPost Software Security Advisory: XSS Vunerabilities in Multiple CityPost Software Severity: Medium Title: XSS Vunerabilities in Simple PHP Upload, Simple Image Editor and Automated Link Exchange Vendor: Allen Kim Vendor Website:...

[SA15011] CityPost Image Editor Cross-Site Scripting Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: CityPost Image Editor Cross-Site Scripting...

CityPost PHP Image Editor M3 URI Parameter Cross-Site Scripting Vulnerability

CityPost PHP Image Editor M3 URI Parameter Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/13258/info CityPost Image Cropper/Resizer is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application...

CityPost PHP Image Editor Imgsrc URI Parameter Cross-Site Scripting Vulnerability

CityPost PHP Image Editor Imgsrc URI Parameter Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/13259/info CityPost Image Cropper/Resizer is affected by a cross-site scripting vulnerability. This issue is due to a failure in the...

CityPost PHP Image Editor M1M2M3ImgsrcM4 - URI Cross-Site Scripting

CityPost PHP Image Editor M1M2M3ImgsrcM4 - URI Cross-Site Scripting source: https://www.securityfocus.com/bid/13256/info source: https://www.securityfocus.com/bid/13257/info source: https://www.securityfocus.com/bid/13258/info source: https://www.securityfocus.com/bid/13259/info source:...