SQL Injection Vulnerability in List_picture Parameter of SMiCMS Government Website System

State Micro CMS is one of the mainstream CMS systems in China, and is also the open source platform provider in the field of PHP in Southern China. State Micro CMS government website system listpicture parameter SQL injection vulnerability, the vulnerability is due to the failure of the user to...

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the ReadPICTImage function in the pict.c file of the ImageMagick console graphic editor is caused by the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure loss of access to...

chromium-browser: race condition in webrtc

Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to trigger a race condition via a crafted HTML page...

Wordpress Art Picture Shop Plugins File Upload Vulnerability

Exploit for php platform in category web applications Wordpress Plugins Art Picture Shop File Upload Vulnerability | CSRF Author : Berandal Google Dork: inurl:/wp-content/plugins/art-picture-shop/admin/ Tested on: Win 7, Linux Blog : http://www.maxteroit.com/ +-+-+-+-+-+-+-+-+ |B|e|r|a|n|d|a|l|...

CVE-2017-3552: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: OPERA Room Image/Picture Setup. Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable" vulnerability allows...

ImageMagick Denial of Service Vulnerability (CNVD-2017-04577)

ImageMagick is an open source image viewing and editing tool for Unix/Linux platforms. ImageMagick suffers from a denial of service vulnerability, which can be exploited by a remote attacker via a constructed dpx file...

Memory Corruption Vulnerability in PSD Image Processing by Universal Viewer

Universal Picture Viewer is an image viewing tool. Universal Picture Viewer has a memory corruption vulnerability when dealing with PSD format images, which allows an attacker to construct a malformed PSD format that can cause the program to crash, and if successfully exploited, can lead to...

Memory Corruption Vulnerability in PCX Image Processing by Universal Viewer

Universal Picture Viewer is an image viewing tool. Universal Picture Viewer has a memory corruption vulnerability when dealing with PCX-format pictures, which allows an attacker to construct a malformed PCX format that can cause the program to crash, and if successfully exploited, can lead to...

Memory Corruption Vulnerability in ICO Image Processing by Universal Viewer

Universal Picture Viewer is an image viewing tool. Universal Picture Viewer has a memory corruption vulnerability when dealing with ICO format images, which allows an attacker to construct a malformed ICO format that can cause the program to crash, and if successfully exploited, can lead to...

Memory Corruption Vulnerability in BMP Image Processing by Universal Viewer

Universal Picture Viewer is an image viewing tool. Universal Picture Viewer has a memory corruption vulnerability when dealing with BMP format images, which allows an attacker to construct a malformed BMP format that can cause the program to crash, and if successfully exploited, can lead to...

Memory Corruption Vulnerability in GIF Image Processing by Universal Picture Viewer

Universal Picture Viewer is a picture viewing software. Universal Picture Viewer has a memory corruption vulnerability when dealing with GIF format images, which allows an attacker to construct a malformed GIF format that can cause the program to crash, and if successfully exploited, can lead to...

Free Picture Messaging - External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Free Picture Messaging published at the 'play' market has multiple vulnerabilities...

CVE-2017-2992

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header. Successful exploitation could lead to arbitrary code execution...

Open-Xchange: Set Cookie Via SVG

Summary: ======== An attacker could set any cookie to the victim via svg file that he uploads as his profile picture. Steps to reproduce: ============== 1. My contact Detail. 2. Upload the given svg file as profile picture and save. 3. Logout and Clear all the cookie. 4. Login with victim's...

Mail.ru: [allods.mail.ru] Cross-Site Request Forgery (Add-Item)

Hi, I found that there is no anti-csrf while adding an item for '/media.php' in allods.mail.ru, from 'https://allods.mail.ru/media.php?do=additem&section=2' since there was no anti-csrf token, there was still an extra layer of security for csrf which I had to bypass! More Details: The upload...

ImageMagick remote execution vulnerability analysis and exploit-vulnerability warning-the black bar safety net

1.1 ImageMagick description 1. ImageMagick description ImageMagick is a set of powerful, stable and open source set of tools and development kits that can be used to read, write and process the more than 8 9 basic format of the picture file, including the popular TIFF, JPEG, GIF, PNG, PDF, and...

UBUNTU-CVE-2016-3828

decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and SPS NAL units, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28835995...

AD Picture Viewer Arbitrary Code Execution Vulnerability

AD Picture Viewer is a fast displaying picture viewer that allows users to organize graphic files with its file management features. An arbitrary code execution vulnerability exists in AD Picture Viewer. The software suffers from a memory corruption and buffer overflow when processing BMP images...

mediahub.financialpicture.com XSS vulnerability

Vulnerable URL: http://mediahub.financialpicture.com/build/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

[SECURITY] [DLA 458-1] mplayer2 security update

Package : mplayer2 Version : 2.0-554-gf63dbad-1+deb7u1 CVE ID : CVE-2016-4352 Mplayer2 is crashing when playing a fuzzed gif file. The gif demuxes assumes in many places that widthheight is = INTMAX; this might not be true. Fixed by validating the picture size...