Foxit Studio Photo Out of Bounds Read (CVE-2020-8877; CVE-2020-8879)

An out of bounds read vulnerability exists in Foxit Studio Photo. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Photo Share Website 1.0 Cross Site Scripting

Exploit Title: Photo Share Website 1.0 - Persistent Cross-Site Scripting Date: 2020-09-30 Exploit Author: Augkim Vendor Homepage: https://www.sourcecodester.com/php/14478/photo-share-website-using-phpmysql-source-code.html Software Link:...

Photo Share Website 1.0 - Persistent Cross-Site Scripting

Exploit Title: Photo Share Website 1.0 - Persistent Cross-Site Scripting Date: 2020-09-30 Exploit Author: Augkim Vendor Homepage: https://www.sourcecodester.com/php/14478/photo-share-website-using-phpmysql-source-code.html Software Link:...

Fedora: Security Advisory for LibRaw (FEDORA-2020-2d9d628dd2)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Denial Of Service (DoS)

ufraw is vulnerable to stack-based buffer overflow. It is due to a flaw in the findgreen function, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file...

Binary Vulnerability in Shenzhen Xunlei.com Culture Co. Light and Shadow Viewing (CNVD-2020-58850)

LightShadow Viewer is a photo viewing software for photography and designers, featuring fast viewing, accurate color reproduction of pictures in various color spaces, and so on. Shenzhen Xunlei.com Culture Co., Ltd Light Shadow Viewer has a binary vulnerability that can be exploited by attackers ...

Binary Vulnerability in Shenzhen Xunlei.com Culture Co. Light and Shadow Viewing (CNVD-2020-58846)

LightShadow Viewer is a photo viewing software for photography and designers, featuring fast viewing, accurate color reproduction of pictures in various color spaces, and so on. Shenzhen Xunlei.com Culture Co., Ltd Light Shadow Viewer has a binary vulnerability that can be exploited by attackers ...

WordPress NextGen Gallery Sell Photo Plugin Cross Site Scripting

A cross-site scripting vulnerability exists in WordPress NextGen Gallery Sell Photo Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Foxit Studio Photo PSD Out-of-Bounds Write Vulnerability

Foxit Studio Photo is a professional image editing software. Foxit Studio Photo parses PSD files with an out-of-bounds write vulnerability that can be exploited by a remote attacker to submit a special file request, which induces the user to parse it, and can be used to execute arbitrary code in...

Foxit Studio Photo < 3.6.6.928 Out-of-Bounds Write

According to its self-reported version, the Foxit Studio Photo application installed on the remote Windows host is prior to 3.6.6.928. It is, therefore, affected by an out-of-bounds write error when processing PSD files. A remote, unauthenticated attacker could trick a victim into opening a...

Foxit Studio Photo Arbitrary Code Execution Vulnerability

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit Studio Photo 3.6.6.922, which can be exploited by attackers to remotely execute code...

CVE-2020-17403

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17404

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17404

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17403

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17404

Foxit Studio Photo 3.6.6.922 is affected by a PSD-file handling flaw that enables an out-of-bounds write, leading to remote code execution in the context of the process. Root cause: insufficient validation of data during PSD processing, which can write past the end of an allocated structure. Expl...

CVE-2020-17404

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17403

Summary: CVE-2020-17403 affects Foxit Studio Photo (notably versions prior to 3.6.6.928, with references to 3.6.6.922 in some records). The issue is a PSD file handling vulnerability caused by insufficient validation, resulting in an out-of-bounds write that can execute code in the process contex...

CVE-2020-17403

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit Studio Photo PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...