CVE-2018-5168

Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element. This could allow a malicious site to install a theme without user interaction which could contain offensive or embarrassing images. This vulnerability affects...

BSA-2018-603

Security Advisory ID : BSA-2018-603 Component : WebGUI Revision : 1.0: Final Multiple GPON Home Routers could allow a remote attacker to bypass security restrictions, caused by a flaw in the authentication mechanism. By appending "?images/" to the end of the web address on any of the router's...

libgxps gxps-images.c File Stack Buffer Out-of-Bounds Read Vulnerability

libgxps is a library for processing XPS documents based on GObject a C-based framework. A stack buffer out-of-bounds read vulnerability exists in the Glib call to the 'gxpsimagesguesscontenttype' function in the gxps-images.c file in libgxps 0.3.0 and earlier, which stems from the program receivi...

DEBIAN-CVE-2018-10767

There is a stack-based buffer over-read in calling GLib in the function gxpsimagesguesscontenttype of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a ginputstreamread call. A crafted input will lead to a remote denial of service attack...

UBUNTU-CVE-2018-10767

There is a stack-based buffer over-read in calling GLib in the function gxpsimagesguesscontenttype of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a ginputstreamread call. A crafted input will lead to a remote denial of service attack...

gd: Stack overflow in gdImageFillToBorder on truecolor images

An infinite recursion flaw was found in the gdImageFillToBorder function from the gd library; also used by PHP imagefilltoborder function, when passing a negative integer as the color parameter, triggering a stack overflow. A remote attacker with ability to force a negative color identifier when...

GPON Home Routers Security Bypass Vulnerability

Dasan GPON is a home router product from Dasan Korea. A security vulnerability exists in the Dasan GPON home router. An attacker can exploit the vulnerability to bypass authentication by adding '?images' to any URL of the device...

UPDATE: Kali Linux 2018.2 Release!

PenTestIT RSS Feed Second Kali Linux update of this year and this time, it is about the latest Kali Linux 2018.2 release! The last release was made available recently in the month of February. This new release includes all patches, fixes, updates, and improvements since the last release – Kali...

CVE-2018-1277

Cloud Foundry Garden-runC, versions prior to 1.13.0, does not correctly enforce disc quotas for Docker image layers. A remote authenticated user may push an app with a malicious Docker image that will consume more space on a Diego cell than allocated in their quota, potentially causing a DoS...

CVE-2018-1277

Cloud Foundry Garden-runC, versions prior to 1.13.0, does not correctly enforce disc quotas for Docker image layers. A remote authenticated user may push an app with a malicious Docker image that will consume more space on a Diego cell than allocated in their quota, potentially causing a DoS...

Moderate: Red Hat Security Advisory: Red Hat Mobile Application Platform 4.6.0 Release - Container Images

Red Hat Mobile Application Platform 4.6.0 Release - Container Images Red Hat Mobile Application Platform RHMAP 4.6.0 consists of three main components: Core - development and management of apps occurs in the RHMAP Core, which can be installed either in an on-premise installation of OpenShift...

Memory Corruption Vulnerability in WPS Office ocr Module Handling GIF Images

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. A memory corruption vulnerability exists in the OCR module Image to Text of WPS Office wh...

Heap Overflow Vulnerability in WPS Office ocr Module

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. A heap overflow vulnerability exists in the OCR module Image to Text of WPS OFFICE when...

DEBIAN-CVE-2017-14448

An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

Denial of Service Vulnerability in WPS Office ocr Module

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. A denial-of-service vulnerability exists in WPS OFFICE's OCR module Image to Text when...

Cross site scripting

Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images...

CVE-2018-10297

CVE-2018-10297 affects Discuz! DiscuzX through X3.4. The vulnerability is a stored XSS via the URL portal.php?mod=portalcp&ac=article, caused by mishandling of IMG elements linked to remote images. Multiple connected sources (NVD, Red Hat, CNVD, CVE records) report the same issue across Discuz! D...

DEBIAN-CVE-2018-3848

In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution...

DEBIAN-CVE-2018-3846

In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution...

Stack overflow

In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution...