CVE-2019-20326: Out-of-bounds Write

A heap-based buffer overflow in cairoimagesurfacecreatefromjpeg in extensions/cairoio/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file...

PT-2020-10385 · Gnome +3 · Gthumb +5

Name of the Vulnerable Software and Affected Versions: gThumb versions prior to 3.8.3 Linux Mint Pix versions prior to 2.4.5 Description: A heap-based buffer overflow in the cairo image surface create from jpeg function allows attackers to cause a crash and potentially execute arbitrary code via ...

Microsoft DirectX SDK 2010 Denial Of Service

Exploit Title: Microsoft DirectX SDK 2010 - '.PIXrun' Denial Of Service PoC Exploit Author : ZwX Exploit Date: 2019-11-26 Vendor Homepage : https://www.microsoft.com/ Link Software : https://www.microsoft.com/en-us/download/details.aspx?id=681 Tested on OS: Windows 7 Proof of Concept PoC:...

Microsoft DirectX SDK 2010 - (.PIXrun) Denial Of Service Exploit

Exploit Title: Microsoft DirectX SDK 2010 - '.PIXrun' Denial Of Service PoC Exploit Author : ZwX Vendor Homepage : https://www.microsoft.com/ Link Software : https://www.microsoft.com/en-us/download/details.aspx?id=681 Tested on OS: Windows 7 Proof of Concept PoC: ======================= 1.Downlo...

PIX-Link Repeater/Router LV-WR09 Cross-Site Scripting Vulnerability

The PIX-Link Repeater/Router LV-WR09 is a wireless WiFi signal extender. A cross-site scripting vulnerability exists in the PIX-Link Repeater/Router LV-WR09 using firmware version 28K.MiniRouter.20180616. The vulnerability stems from a lack of proper validation of client data by the WEB...

CVE-2019-11877

XSS on the PIX-Link Repeater/Router LV-WR09 with firmware v28K.MiniRouter.20180616 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID...

CVE-2019-11877

XSS on the PIX-Link Repeater/Router LV-WR09 with firmware v28K.MiniRouter.20180616 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID...

Design/Logic Flaw

XSS on the PIX-Link Repeater/Router LV-WR09 with firmware v28K.MiniRouter.20180616 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID...

CVE-2019-11877

The CVE-2019-11877 entry concerns the PIX-Link Repeater/Router LV-WR09. Connected sources specify a cross-site scripting (XSS) vulnerability in firmware v28K.MiniRouter.20180616, where a crafted ESSID exploited a lack of input validation in the WEB application to steal credentials without network...

CVE-2019-11877

XSS on the PIX-Link Repeater/Router LV-WR09 with firmware v28K.MiniRouter.20180616 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID...

CVE-2019-11877: Improper Neutralization of Input During Web Page Generation

XSS on the PIX-Link Repeater/Router LV-WR09 with firmware v28K.MiniRouter.20180616 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID...

Drobo 5N2 Directory Traversal Vulnerability

Drobo 5N2 NAS is a networked storage device NAS from Drobo, USA. The device has features such as data sharing, data backup, remote access and disaster recovery.Drobo Pix Web application is one of the applications that provides mobile backup functionality. A directory traversal vulnerability exist...

CVE-2018-14706

System command injection in the /DroboPix/api/drobopix/demo endpoint on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to execute system commands via the payload in a POST request...

Directory traversal

Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload files to arbitrary locations...

CVE-2018-14707

Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload files to arbitrary locations...

CVE-2018-14707

Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload files to arbitrary locations...

CVE-2018-14707

Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload files to arbitrary locations...

CVE-2018-14707

CVE-2018-14707 describes a directory traversal in the Drobo Pix web application of Drobo 5N2 NAS (version 4.0.5-13.28.96115). The vulnerability allows unauthenticated attackers to upload files to arbitrary locations. Multiple connected sources corroborate a DroboPix-related path traversal affecti...

CVE-2018-14707: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload files to arbitrary locations...

DEBIAN-CVE-2017-9994

libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pixfmt is set, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecifie...