380 matches found
Huawei EulerOS: Security Advisory for gimp (EulerOS-SA-2019-2021)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GPAC Null Pointer Dereference Vulnerability (CNVD-2020-12683)
GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the gfisomgetmediadatasize function in isomedia/isomread.c in GPAC 0.8.0. An attacker could exploit this vulnerability to cause a denial of service...
CVE-2019-18997
The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file. Path configuration in PB610 HMISimulator versions 2.8.0.424 and earlier potentially allows access to files outside of the working directory, thus potentially supporting...
Buffer overflow vulnerability in libming 'readBytes' function
libming is a Flash SWF output library written in C. It can be used as a library to export Flash SWF files to other languages. A buffer overflow vulnerability exists in the 'readBytes' function of the util/read.c file in libming 0.4.8 and earlier. No detailed vulnerability details are provided at...
X3.4 suffers from arbitrary file reading vulnerability
Discuz! is a general-purpose community forum software system. X3.4 has an arbitrary file reading vulnerability that can be exploited by attackers to read file information...
EulerOS 2.0 SP8 : gimp (EulerOS-SA-2019-1761)
According to the version of the gimp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GIMP through 2.10.2 makes ggettmpdir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by th...
EulerOS 2.0 SP2 : gimp (EulerOS-SA-2019-1741)
According to the version of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GIMP through 2.10.2 makes ggettmpdir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by t...
The vulnerability of the SnCloneVault.sys driver of the Secret Net Studio information protection system allows a hacker to gain access to read and write file data.
The vulnerability of the SnCloneVault.sys driver of the Secret Net Studio information protection system is related to deficiencies in the control of input data within the driver. Exploiting this vulnerability can allow attackers to gain access to read and write file data...
EulerOS 2.0 SP5 : gimp (EulerOS-SA-2019-1675)
According to the version of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GIMP through 2.10.2 makes ggettmpdir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by t...
CVE-2017-9382
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url "/port3480". It seems that the UPnP services provide "file" as one of the service actions for a normal...
CVE-2019-8999
An XML External Entity vulnerability in the UEM Core of BlackBerry UEM versions earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account...
The vulnerability of the kernel_read_file function in Linux kernels, related to improper memory release before deleting last references, allows a malicious actor to trigger a service failure.
The vulnerability of the kernelreadfile function in the Linux operating system’s kernel is related to a memory leak in the implementation of the vfsread handler. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted file...
Linux/x86 Read /etc/passwd Shellcode 58 bytes
/ Shellcode Title: Linux/x86 - Read File /etc/passwd 58 bytes. NULL byte free Author: Kiewicz @Kiewicz Homepage: https://0xkiewicz.github.io Tested on: Debian/x86 gcc -o shellcode -z execstack -fno-stack-protector shellcode.c PA-7854 / / $ objdump -d -M intel readfile readfile: file format...
Linux/x86 - Read File (/etc/passwd) MSF Optimized Shellcode (61 bytes)
/ Shellcode Title: Linux/x86 - Read File /etc/passwd MSF Optimized Shellcode 61 bytes Author: Ray Doyle @doylersec Homepage: https://www.doyler.net Tested on: Linux/x86 gcc -o readfileshellcode -z execstack -fno-stack-protector readfileshellcode.c / / Disassembly of section .text: 08048060 :...
Linux/x86 - Read File (/etc/passwd) + MSF Optimized Shellcode (61 bytes)
Linux/x86 - Read File /etc/passwd + MSF Optimized Shellcode 61 bytes. Shellcode exploit for Linuxx86 platform / Shellcode Title: Linux/x86 - Read File /etc/passwd MSF Optimized Shellcode 61 bytes Date: 2018-09-13 Author: Ray Doyle @doylersec Homepage: https://www.doyler.net Tested on: Linux/x86 g...
DEBIAN-CVE-2018-16424
A double free when handling responses in readfile in tools/egk-tool.c aka the eGK card tool in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...
UBUNTU-CVE-2018-16424
A double free when handling responses in readfile in tools/egk-tool.c aka the eGK card tool in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...
cmft Denial of Service Vulnerability
cmft is a set of cross-platform for filtering stereo mapping open source command line tools . A security vulnerability exists in the 'cmft::rwReadFile' function in the image.cpp file in cmft 2017-09-24 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of...
Design/Logic Flaw
GIMP through 2.10.2 makes ggettmpdir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimpwriteandreadfile function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was...
