cute_png 缓冲区错误漏洞

cutepng is an application of cutepng open source. A buffer error vulnerability exists in cutepng version 1.05, which stems from a heap buffer overflow vulnerability contained in the cpunfilter function at cutepng.h. The vulnerability is caused by the use of the cpunfilter function...

PT-2024-31942 · Cute Png · Cute Png

Name of the Vulnerable Software and Affected Versions: cute png version 1.05 Description: A heap buffer overflow issue was discovered in the cp stored function at cute png.h. This issue can be exploited via the cp stored function. Recommendations: For cute png version 1.05, consider disabling the...

WordPress Polls CP plugin <= 1.0.74 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin CP Polls versions = 1.0.74...

WordPress CP Polls Plugin <= 1.0.74 is vulnerable to Cross Site Scripting (XSS)

Software CP Polls Type Plugin Vulnerable versions = 1.0.74 Fixed in 1.0.75 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47297 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bd0fc6118ee8 Credits Muhamad Agil Fachrian Required...

PT-2024-29313 · Alibaba · Aliyuncontainerservice Pouch

Name of the Vulnerable Software and Affected Versions: AliyunContainerService pouch version 1.3.1 Description: A symlink following vulnerability in the pouch cp function of AliyunContainerService pouch allows attackers to escalate privileges and write arbitrary files. Recommendations: For...

The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP allows a perpetrator to cause service interruptions.

The vulnerability of the web servers of microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the d_expression_1 function in the cp-demangle.c component of the GNU Binutils development environment, which involves reading data beyond the allowable buffer limits, allows a attacker to cause a service failure.

The vulnerability of the dexpression1 function in the cp-demangle.c component of the GNU Binutils development environment is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Siemens Industrial Product Null Pointer Dereference Vulnerability (CNVD-2024-38015)

SIMATIC CP 1242 and CP 1243 associated processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as firewalls, virtual private networks VPNs, and support for other data encryption protocols.SIMATIC HMI Panels are used for operator...

CVE-2023-30756

A vulnerability has been identified in SIMATIC CP 1242-7 V2 incl. SIPLUS variants All versions V3.5.20, SIMATIC CP 1243-1 incl. SIPLUS variants All versions V3.5.20, SIMATIC CP 1243-1 DNP3 incl. SIPLUS variants All versions V3.5.20, SIMATIC CP 1243-1 IEC incl. SIPLUS variants All versions V3.5.20...

CVE-2023-30755

A vulnerability has been identified in SIMATIC CP 1242-7 V2 incl. SIPLUS variants All versions V3.5.20, SIMATIC CP 1243-1 incl. SIPLUS variants All versions V3.5.20, SIMATIC CP 1243-1 DNP3 incl. SIPLUS variants All versions V3.5.20, SIMATIC CP 1243-1 IEC incl. SIPLUS variants All versions V3.5.20...

CVE-2023-30755

Siemens CVE-2023-30755 is a NULL POINTER DEREFERENCE affecting multiple SIMATIC/Siemens products (e.g., CP 1242-7 V2, CP 1243 variants, HMI Comfort Panels, IPC DiagBase/DiagMonitor, WinCC Runtime Advanced, SIPLUS TIM 1531 IRC, TIM 1531 IRC). The web server does not properly handle shutdown/reboot...

CVE-2023-28827

The CVE-2023-28827 issue is a NULL pointer dereference in the web server of Siemens devices (e.g., SIMATIC CP 1242-7 V2, CP 1243-1/7/8, HMI Comfort Panels, IPC DiagBase/DiagMonitor, WinCC Runtime Advanced, SIPLUS TIM 1531 IRC, TIM 1531 IRC) and related SIPLUS/TIM variants. The vulnerability arise...

WordPress CP Multi-View Calendar Unauthenticated SQL Injection Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'uri' class MetasploitModule 'WordPress CP Multi-View Calendar Unauthenticated SQL Injection Scanner', 'Description' = %q This module will scan given instances f...

GO-2022-0802 Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes...

GO-2022-0782 Symlink Attack in kubectl cp in k8s.io/kubernetes

Symlink Attack in kubectl cp in k8s.io/kubernetes...

Juzaweb CMS 路径遍历漏洞

Juzaweb CMS is a content management system based on Laravel framework and Web platform developed by Juzaweb individual developers. A path traversal vulnerability exists in Juzaweb CMS version 3.4.2 and earlier versions, which stems from an unknown function in the file /admin-cp/theme/editor/defau...

HiColor 安全漏洞

HiColor is a program by the individual developer D. Bohdan. It is used to convert images to 15-bit and 16-bit RGB colors. A security vulnerability exists in HiColor version 0.5.0, which stems from a heap buffer overflow vulnerability in the cpblock function, allowing an attacker to trigger a deni...

PT-2024-29399 · Hicolor · Hicolor

Name of the Vulnerable Software and Affected Versions: hicolor version 0.5.0 Description: A heap buffer overflow in the function cp stored /vendor/cute png.h allows attackers to cause a Denial of Service DoS via a crafted PNG file. This issue also risks crashes, data corruption, and potentially...

PT-2024-29400 · Hicolor · Hicolor

Name of the Vulnerable Software and Affected Versions: hicolor version 0.5.0 Description: A heap buffer overflow in the cp block function, located in /vendor/cute png.h, allows attackers to cause a Denial of Service DoS via a crafted PNG file. Recommendations: For hicolor version 0.5.0, consider...

HiColor 安全漏洞

HiColor is a program by the individual developer D. Bohdan. It is used to convert images to 15-bit and 16-bit RGB colors. A security vulnerability exists in HiColor version 0.5.0, which stems from a stack buffer overflow vulnerability in the cpdynamic function, allowing an attacker to trigger a...