Smush < 3.9.9 - Admin+ Reflected Cross-Site Scripting

The plugin does not sanitise and escape a configuration parameter before outputting it back in an admin page when uploading a malicious preset configuration, leading to a Reflected Cross-Site Scripting. For the attack to be successful, an attacker would need an admin to upload a malicious...

Smush < 3.9.9 - Admin+ Reflected Cross-Site Scripting

The plugin does not sanitise and escape a configuration parameter before outputting it back in an admin page when uploading a malicious preset configuration, leading to a Reflected Cross-Site Scripting. For the attack to be successful, an attacker would need an admin to upload a malicious...

WordPress Smush Image Compression and Optimization plugin <= 2.9.1 - Authenticated XSS & Phar Deserialization vulnerabilities

Authenticated XSS & Phar Deserialization vulnerabilities found by RIPS Technologies in WordPress Smush Image Compression and Optimization plugin versions = 2.9.1. Solution Update the WordPress Smush Image Compression and Optimization plugin to the latest available version at least 3.0.0...

Smush Image Compression and Optimization <= 2.9.1 - Authenticated Phar Deserialization

The Smush – Lazy Load Images, Optimize & Compress Images WordPress plugin was affected by an Authenticated Phar Deserialization security vulnerability...

Smush Image Plugin for WordPress < 2.7.6 Directory Traversal

According to its self-reported version, the Appointments Plugin for WordPress running on the remote web server is prior to 2.7.6. It is, therefore, affected by a directory traversal vulnerability. An unauthenticated, remote attacker may exploit this to reveal underlying directory structures and...

WordPress Smush Image Compression and Optimization plugin path traversal vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Smush Image Compression and Optimization plugin is one of the image compression, optimization plugin. A path...

WordPress Smush Image Compression and Optimization Plugin < 2.7.6 Directory Traversal Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpmudev:smushimagecompressionandoptimization"; if descriptio...

WordPress Smush Image Compression and Optimization plugin <=2.7.5 - File Traversal vulnerability

File Traversal vulnerability found by Ricardo Sánchez in WordPress Smush Image Compression and Optimization plugin versions =2.7.5. Solution Update the WordPress Smush Image Compression and Optimization plugin to the latest available version at least 2.7.6...

CVE-2017-15079

The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal...

Directory traversal

The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal...

CVE-2017-15079

The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal...

CVE-2017-15079

CVE-2017-15079 concerns the WordPress plugin Smush Image Compression and Optimization (pre-2.7.6). According to sources, this plugin version is vulnerable to a directory traversal flaw that permits an unauthenticated, remote attacker to reveal underlying directory structures. The vulnerability is...

CVE-2017-15079

The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal...

WordPress Smush Image 2.7.4.1 Directory Traversal

Class File transversal Remote Yes Credit Ricardo Sanchez Smush Image Wordpress WP plugin is prone to file transversal vulnerability because it fails to sufficiently folders privacy. To exploit this issue following steps: Demo url:...

WordPress Smush Image 2.7.4.1 Directory Traversal Vulnerability

WordPress Smush Image plugin version 2.7.4.1 suffers from a directory traversal vulnerability. Credit Ricardo Sanchez Smush Image Wordpress WP plugin is prone to file transversal vulnerability because it fails to sufficiently folders privacy. To exploit this issue following steps: Demo url:...

Smush Image Compression and Optimization <= 2.7.5 - File Transversal

The Smush – Lazy Load Images, Optimize & Compress Images WordPress plugin was affected by a File Transversal security vulnerability...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and other possible attacks. A malicious user can pass a malicious LucasArts Smush file to the system to cause a segmentation violation that can lead to the system crashing...

FFmpeg destroy_buffers Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'destroybuffers' function in the libavcodec/sanm.c file in versions of FFmpeg prior to 2.7.2, which stems from the program's failure to correctly...

DEBIAN-CVE-2015-6822

The destroybuffers function in libavcodec/sanm.c in FFmpeg before 2.7.2 does not properly maintain height and width values in the video context, which allows remote attackers to cause a denial of service segmentation violation and application crash or possibly have unspecified other impact via...

CVE-2015-6822

The destroybuffers function in libavcodec/sanm.c in FFmpeg before 2.7.2 does not properly maintain height and width values in the video context, which allows remote attackers to cause a denial of service segmentation violation and application crash or possibly have unspecified other impact via...