TwistedBrush Pro Studio 24.06 - 'Script Recorder' Denial of Service (PoC)

-- coding: utf-8 -- Exploit Title: TwistedBrush Pro Studio 24.06 - 'Script Recorder' Denial of Service PoC Date: 13/05/2019 Author: Alejandra Sánchez Vendor Homepage: http://www.pixarra.com Software Link http://www.pixarra.com/uploads/9/4/6/3/94635436/tbrusha.exe Version: 24.06 Tested on: Windows...

TwistedBrush Pro Studio 24.06 - Resize Image Denial of Service Exploit

-- coding: utf-8 -- Exploit Title: TwistedBrush Pro Studio 24.06 - 'Resize Image' Denial of Service PoC Author: Alejandra Sánchez Vendor Homepage: http://www.pixarra.com Software Link http://www.pixarra.com/uploads/9/4/6/3/94635436/tbrusha.exe Version: 24.06 Tested on: Windows 10 Proof of Concept...

Selfie Studio 2.17 - Resize Image Denial of Service Exploit

-- coding: utf-8 -- Exploit Title: Selfie Studio 2.17 - 'Resize Image' Denial of Service PoC Date: 13/05/2019 Author: Alejandra Sánchez Vendor Homepage: http://www.pixarra.com Software Link http://www.pixarra.com/uploads/9/4/6/3/94635436/tbselfiestudioinstall.exe Version: 2.17 Tested on: Windows ...

TwistedBrush Pro Studio 24.06 - Script Recorder Denial of Service Exploit

-- coding: utf-8 -- Exploit Title: TwistedBrush Pro Studio 24.06 - 'Script Recorder' Denial of Service PoC Author: Alejandra Sánchez Vendor Homepage: http://www.pixarra.com Software Link http://www.pixarra.com/uploads/9/4/6/3/94635436/tbrusha.exe Version: 24.06 Tested on: Windows 10 Proof of...

TwistedBrush Pro Studio 24.06 - (.srp) Denial of Service Exploit

-- coding: utf-8 -- Exploit Title: TwistedBrush Pro Studio 24.06 - '.srp' Denial of Service PoC Author: Alejandra Sánchez Vendor Homepage: http://www.pixarra.com Software Link http://www.pixarra.com/uploads/9/4/6/3/94635436/tbrusha.exe Version: 24.06 Tested on: Windows 10 Proof of Concept: 1.- Ru...

SQL Injection Vulnerability in Studio One's Website Building System

Studio One is a collective of graphic designers and web planners. A SQL injection vulnerability exists in the Studio One website builder system. An attacker can exploit the vulnerability to obtain sensitive database information...

Buffer Overflow Vulnerability in Wedding Slideshow Studio Software

Wedding Slideshow Studio is a photo viewing software. A buffer overflow vulnerability exists in the Wedding Slideshow Studio software. An attacker could execute arbitrary code within the context of the application by failing to check the length of input data at the Registration Name...

Microsoft Visual Studio asm Memory Code Code Execution Vulnerability

Microsoft Visual Studio is a family of development toolkits from Microsoft Corporation in the United States. A memory corruption vulnerability exists in the Microsoft Visual Studio asm block compilation, which allows remote attackers to exploit the vulnerability by submitting a special file reque...

Stack Overflow Vulnerability in Turing Open Matter Configuration Software Studio.exe Handling SPJ Files

Beijing Turing Kaiwu Technology Co., Ltd. is a company that deals with technology development; computer system services; data processing; basic software services; application software services and other items. A stack overflow vulnerability exists in the SPJ file handled by Studio.exe of Turing's...

Microsoft Visual Studio 'asm' Remote Memory Corruption Vulnerability

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. A remote memory corruption vulnerability exists in Microsoft Visual Studio 'asm'. An attacker could...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Decision Optimization for Watson Studio Local

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by IBM Decision Optimization for Watson Studio Local. IBM Decision Optimization for Watson Studio Local has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the...

(0Day) Microsoft Visual Studio asm Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on executables compiled using vulnerable installations of Microsoft Visual Studio. Attack vectors will vary depending on the nature of the executable in question, but would include opening a specially crafted file which was compiled wi...

wecon LeviStudio suffers from dll hijacking vulnerability

Ltd. is a high-tech company specializing in the research, development and sales of products in the field of automation. wecon LeviStudio has a dll hijacking vulnerability that can be exploited by attackers to gain device privileges...

CARBANAK Week Part Two: Continuing the CARBANAK Source Code Analysis

Update April 30: Following the release of our four-part CARBANAK Week blog series, many readers have found places to make the data shared in these posts actionable. We have updated this post to include some of this information. In the previous installment, we wrote about how string hashing was us...

InduSoft Web Studio IMHOST32 suffers from dll hijacking vulnerability

InduSoft Web Studio is a popular automation integration development software. A dll hijacking vulnerability exists in InduSoft Web Studio IMHOST32, which can be exploited by attackers to execute malicious code...

DEBIAN-CVE-2019-11339

The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via crafted MPEG-4 video data...

CVE-2019-11339

The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via crafted MPEG-4 video data...

Foxit Studio Photo Remote Code Execution Vulnerability (CNVD-2019-12138)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in the handling of EZI files in Foxit Studio Photo 3.6.6.779 and prior versions, which arises from the program failing to properly validate user-submitted input. An attacker...

Foxit Studio Photo Information Disclosure Vulnerability

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in the handling of TIF files in Foxit Studio Photo 3.6.6.779 and prior versions, which is caused by the program failing to properly validate user-submitted data. An attacker...

Foxit Studio Photo Remote Code Execution Vulnerability

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in the handling of EZI files in Foxit Studio Photo 3.6.6.779 and prior versions, which arises from the program failing to properly validate user-submitted input. An attacker...