SUSE SLED12 Security Update : libraw (SUSE-SU-2019:0002-1)

This update for libraw fixes the following issues : Security issues fixed : CVE-2018-5808: Fixed a stack-based buffer overflow and code execution vulnerability in findgreen function internal/dcrawcommon.cpp bsc1118894. CVE-2018-5805: Fixed a boundary error within the quicktake100loadraw function...

SUSE-SU-2019:0002-1 Security update for libraw

This update for libraw fixes the following issues: Security issues fixed: - CVE-2018-5808: Fixed a stack-based buffer overflow and code execution vulnerability in findgreen function internal/dcrawcommon.cpp bsc1118894. - CVE-2018-5805: Fixed a boundary error within the quicktake100loadraw functio...

Vtiger CRM 7.1.0 - Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Vtiger CRM 7.1.0 - Remote Code Execution Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://www.vtiger.com Software Link:...

CleanMyMac X removeKextAtPath privilege escalation vulnerability

Summary The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with local access could use this vulnerability to modify the running kernel extensions on the system. Tested Versions Clean My Mac X 4.04 Product URLs...

Clean My Mac X removeLaunchdAgentAtPath privilege escalation vulnerability

Summary An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root. Tested Versions Clean My Mac X 4.04 Product...

Voyager 1.1.3 Shell Upload

Exploit Title: Voyager 1.1.3 - Arbitrary File Upload Google Dork: N/A Date: 1 Jan 2019 Exploit Author: Deyaa Muhammad Author EMail: contact at deyaa.me Author Blog: http://deyaa.me Poc Video: https://youtu.be/5GnHbFqRP9M Vendor Homepage: https://laravelvoyager.com/ Software Link:...

The vulnerability of the read_creator_block function in the GIMP graphic editor allows for reading beyond the buffer boundary of dynamic memory, enabling attackers to cause service failures, compromise data integrity, and undermine data confidentiality.

The vulnerability of the readcreatorblock function in the GIMP graphic editor’s plug-in/common/file-psp.c file is related to reading data beyond the buffer boundaries of dynamic memory. Exploiting this vulnerability could allow an attacker to cause service failures, compromise data integrity, and...

GHSA-FVM3-CFVJ-GXQQ High severity vulnerability that affects commons-fileupload:commons-fileupload

The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service CPU consumption via a long boundary string...

The vulnerability of the H5O_attr_decode() function in the HDF5 library, which allows a hacker to cause a service failure

The vulnerability of the H5OattrDecode function H5Oattr.c in the HDF5 library arises from the operation leaving the buffer boundaries into memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by using a specially crafted HDF5 file...

The vulnerability of the Microsoft Outlook email client, related to the execution of operations outside the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

Google Android Buffer Overflow Vulnerability (CNVD-2019-27577)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the 'impdparsedrcextv1' function of the impddrcdynamicpayload.c file in Android version 9, which stems from a lack of boundary checking i...

Microsoft Windows GDI Component CVE-2018-8595 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...

Google Android Buffer Overflow Vulnerability (CNVD-2019-27580)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the 'impdparseparametricdrcinstructions' function of the impddrcstaticpayload.c file in Android version 9, which stems from a lack of...

Google Android Buffer Overflow Vulnerability (CNVD-2019-27576)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the 'impdparseloudeqinstructions' function of the impddrcdynamicpayload.c file in Android version 9, which stems from a lack of boundary...

Google Android Buffer Overflow Vulnerability (CNVD-2019-27581)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the 'impdparsedwnmixinstructions' function of the impddrcstaticpayload.c file in Android version 9, which stems from a lack of boundary...

Google Android Buffer Overflow Vulnerability (CNVD-2019-27579)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the 'impdparametricdrcparsegainsetparams' function of the impddrcstaticpayload.c file in Android version 9, which stems from a lack of...

Google Android Buffer Overflow Vulnerability (CNVD-2019-27574)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the 'impdparsefiltblock' function of the impddrcdynamicpayload.c file in Android version 9, which stems from a lack of boundary checking ...

Google Android NFC Component Privilege Permission and Access Control Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and NFC is one of the components of proximity wireless communication. A boost vulnerability exists in the NFC component of Android, which stems from the program's lack of boundary...

Microsoft .NET Framework CVE-2018-8517 Remote Denial of Service Vulnerability

Description Microsoft .NET Framework is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial of service condition. Technologies Affected Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.5.2 Microsoft .NET...

Microsoft Windows GDI Component CVE-2018-8596 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...