2792 matches found
Pollen CMS 0.6 (index.php, p param) - Local File Disclosure
No description provided by source. Title: Pollen CMS = 0.6 - Local File Disclosure Google Dork: intext:Powered by Pollen CMS Date: 25 Mars 2013 Exploit Author: MizoZ Vendor Homepage: pollencms.com BROKEN Software Link: https://code.google.com/p/pollencms/ Version: 0.6 Tested on: Ubuntu Desktop...
mkportal <= 1.2.1 () Multiple Vulnerabilities
No description provided by source. waraxe-2009-SA070 - Multiple Vulnerabilities in MKPortal = 1.2.1 ============================================================================== Author: Janek Vind waraxe Date: 15. January 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-70.html...
Debian Security Advisory DSA 2965-1 (tiff - security update)
Murray McAllister discovered a heap-based buffer overflow in the gif2tiff command line tool. Executing gif2tiff on a malicious tiff image could result in arbitrary code execution. OpenVAS Vulnerability Test $Id: deb2965.nasl 6692 2017-07-12 09:57:43Z teissa $ Auto-generated from advisory DSA 2965...
Microsoft Office Remote Code Execution Vulnerabilities (2967487)
This host is missing a critical security update according to Microsoft Bulletin MS14-036. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Discuz! <=2.5 csrf防御绕过
简要描述： 在Discuz! '.gif', 2 = '.jpg', 3 = '.png'; 只检查了后缀而不像3.0以上用库检查了图片格式 漏洞证明： 步骤 1、新建一个获取页面源码 提取formhash 然后用formhash发送添加副站长请求的swf，保存为.jpg后缀 2、注册一个账号，去/home.php?mod=spacecp&ac=avatar上传上一步生成的.jpg后缀的swf文件并抓包 上传后的地址应该是 http://192.168.1.104/ucserver/data/tmp/uploaduid.jpg这样的...
WordPress Work The Flow Plugin 1.2.1 - Arbitrary File Upload
Work The Flow plugin is prone to an arbitrary file upload vulnerability that submit an image file via the wtf upload panel and intercept the POST request to /wp-admin/admin-ajax.php. Solution Edit the data from the control "acceptfiletypes"...
DEBIAN-CVE-2013-6369
Stack-based buffer overflow in the jbgdecin function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted image file...
CVE-2013-6369
Stack-based buffer overflow in the jbgdecin function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted image file...
Stack overflow
Stack-based buffer overflow in the jbgdecin function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted image file...
CVE-2013-6369
Stack-based buffer overflow in the jbgdecin function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted image file...
CVE-2013-6369
Stack-based buffer overflow in the jbgdecin function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted image file...
CVE-2013-6369
Stack-based buffer overflow in the jbgdecin function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted image file...
GLSA-201404-03 : OptiPNG: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-201404-03 OptiPNG: User-assisted execution of arbitrary code A use-after-free vulnerability exists in the palette reduction functionality of OptiPNG. Impact : A remote attacker could entice a user to open a specially crafted image...
OptiPNG: User-assisted execution of arbitrary code
Background OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information. Description A use-after-free vulnerability exists in the palette reduction functionality of OptiPNG. Impact A remote attacker could entice a user to open a specially crafted imag...
CVE-2013-0729
Heap-based buffer overflow in Tracker Software PDF-XChange before 2.5.208 allows remote attackers to execute arbitrary code via a crafted Define Huffman Table header in a JPEG image file stream in a PDF file...
CVE-2013-3481
Stack-based buffer overflow in Artweaver Plus and Free before 3.1.5 allows remote attackers to execute arbitrary code via a crafted JPG image file...
CVE-2013-3481
The CVE-2013-3481 issue affects Artweaver Plus/Free up to version 3.1.5, caused by a stack-based buffer overflow when processing JPG images. The root cause is improper handling of JPG graphics, enabling remote code execution. A fixed version is Artweaver 3.1.5 or later (vendor-provided patch). If...
MS09-062: Vulnerabilities in GDI+ Could Allow Remote Code Execution (957488) (uncredentialed check)
The remote host has a version of SQL Server that may host the RSClientPrint ActiveX control that includes a copy of gdiplus.dll that is affected by multiple buffer overflow vulnerabilities when viewing TIFF, PNG, BMP, and Office files that could allow an attacker to execute arbitrary code on the...
Microsoft Color Management Memory Allocation Buffer Overflow - Ver2 (CVE-2008-2245)
A buffer overflow vulnerability has been reported in Microsoft Windows. The vulnerability is due to a boundary error in the Microsoft Color Management System MSCMS module of the Microsoft Image Color Management ICM component. A remote attacker could exploit this vulnerability by persuading users ...
(tiff2pdf): Heap-based buffer overflow in t2_process_jpeg_strip()
Heap-based buffer overflow in the t2pprocessjpegstrip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TIFF image file...