57 matches found
PT-2026-95553
Name of the Vulnerable Software and Affected Versions PJSIP versions prior to 2.18 Description The OpenSSL and GnuTLS backends in pjlib/src/pj/ssl sock ossl.c and pjlib/src/pj/ssl sock gtls.c use string functions that recalculate length and truncate embedded NUL bytes when copying DNS...
CVE-2026-41334
OpenClaw before 2026.3.31 is affected by a decompression bomb DoS in image processing. The vulnerability stems from failing to properly enforce pixel-limit guards on sips, allowing attackers to upload oversized images that exhaust memory and cause denial of service. The CVSS metrics indicate netw...
CVE-2026-41334: Not Failing Securely
OpenClaw before 2026.3.31 contains a decompression bomb vulnerability in image processing that fails to properly enforce pixel-limit guards on sips. Attackers can exploit this by uploading oversized images to cause denial of service through excessive memory consumption...
EUVD-2020-5660
Malware in sbrugna...
EUVD-2000-1223
Malware in sbrugna...
CVE-2020-13404
The ATOS/Sips aka Atos-Magento community module 3.0.0 to 3.0.5 for Magento allows command injection...
CVE-2002-2218
CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon Nilsen simple, integrated publishing system SIPS before 20020209 has unknown impact, possibly gaining privileges or modifying critical configuration, via a CRLF sequence in a key value...
The vulnerability of the sips component in the macOS Sequoia, macOS Sonoma, and macOS Ventura operating systems allows a hacker to execute arbitrary code.
The vulnerability of the sips component in the macOS Sequoia, macOS Sonoma, and macOS Ventura operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the command-line image editing tool Sips in macOS operating systems allows a hacker to trigger a service failure.
The vulnerability of the command-line image editing tool Sips in macOS operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
PT-2025-5310
Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7.3 macOS versions prior to 14.7.3 macOS versions prior to 15.3 Description The issue is related to parsing a maliciously crafted file, which may lead to an unexpected app termination. It is also associated with an...
PT-2024-35734 · WordPress · Simple Image Popup Shortcode
Name of the Vulnerable Software and Affected Versions: The Simple Image Popup Shortcode plugin for WordPress versions up to, and including, 1.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'sips popup' shortcode due to insufficient input sanitization and outpu...
The vulnerability of the sips component in macOS operating systems allows a hacker to trigger a service failure.
The vulnerability of the sips component in macOS operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause system failures...
PT-2023-4264
Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.7.9 macOS versions prior to 12.6.8 macOS versions prior to 13.5 Description The issue is related to an out-of-bounds read in the sips component of macOS, which can be exploited by a remote attacker to cause a...
PT-2023-21242 · Opensips · Opensis
Name of the Vulnerable Software and Affected Versions: OpenSIPS versions prior to 3.1.7 and 3.2.4 Description: OpenSIPS is a Session Initiation Protocol SIP server implementation. The issue arises when a malformed SDP body is received and processed by the delete sdp line function in the sipmsgops...
CVE-2020-13404
The ATOS/Sips aka Atos-Magento community module 3.0.0 to 3.0.5 for Magento allows command injection...
CVE-2020-13404
The ATOS/Sips aka Atos-Magento community module 3.0.0 to 3.0.5 for Magento allows command injection...
Command injection
The ATOS/Sips aka Atos-Magento community module 3.0.0 to 3.0.5 for Magento allows command injection...
CVE-2020-13404
The ATOS/Sips aka Atos-Magento community module 3.0.0 to 3.0.5 for Magento allows command injection...
CVE-2020-13404
The CVE-2020-13404 vulnerability affects the ATOS/Sips (Atos-Magento) community module for Magento, version 3.0.0 through 3.0.5. The issue is a command injection vulnerability in the module that could enable remote code execution on the affected Magento site. The reported CVSS metrics indicate a ...
