470 matches found
GitLab 13.10.2 - Remote Code Execution Exploit
Exploit Title: GitLab 13.10.2 - Remote Code Execution RCE Unauthenticated Shodan Dork: https://www.shodan.io/search?query=title%3A%22GitLab%22+%2B%22Server%3A+nginx%22 Exploit Author: Jacob Baines Vendor Homepage: https://about.gitlab.com/ Software Link: https://gitlab.com/gitlab-org/gitlab...
GitLab 13.10.2 Remote Code Execution
Exploit Title: GitLab 13.10.2 - Remote Code Execution RCE Unauthenticated Shodan Dork: https://www.shodan.io/search?query=title%3A%22GitLab%22+%2B%22Server%3A+nginx%22 Date: 11/01/2021 Exploit Author: Jacob Baines Vendor Homepage: https://about.gitlab.com/ Software Link:...
Exploit for Code Injection in Exiftool_Project Exiftool
Gitlab-Exiftool-RCE Original repos : https://github.com/CsEnox...
The vulnerability of the DJVU reading component in the viewing, creation, and editing of DjVU files by DjVuLibre allows a hacker to cause a service failure by exploiting the issue related to buffer overflows.
The vulnerability of the DJVU reading component in the viewing, creation, and editing of DjVu files in DjVuLibre involves reading data beyond the allowed boundaries of the buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the sorting function in the library for viewing, creating, and editing DjVu files, related to an uncontrolled recursion, allows a hacker to cause service failures.
The vulnerability of the sorting function in the library for viewing, creating, and editing DjVu files in DjVuLibre is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the reading component of the DjVu library for viewing, creating, and editing DjVu files, related to the execution of a loop with an unreachable exit condition, allows attackers to cause service failures.
The vulnerability of the reading component of the DjVu library for viewing, creating, and editing DjVu files in DjVuLibre lies in the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The Top Ransomware Threats Aren’t Who You Think
While there seem to be legions of ransomware gangs, it turns out that just a handful of ransomware-as-a-service RaaS actors dominate the entire ecosystem of encryption-attack threats. In fact, just three ransomware families, none of them household names, make up 64 percent of all threats detected...
VulnCheck KEV: CVE-2021-22204
Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image...
SUSE SLES15 Security Update : djvulibre (SUSE-SU-2021:2796-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2796-1 advisory. - CVE-2021-3630: out-of-bounds write in DJVU:DjVuTXT:decode in DjVuText.cpp bsc1187869 Tenable has extracted the preceding description block...
Denial Of Service
djvulibre is vulnerable to denial of service. The vulnerability exists due to an integer overflow in function render in tools/ddjvu via crafted djvu file that may lead to application crash and other consequences...
Exploit for Code Injection in Exiftool_Project Exiftool
CVE-2021-22204 Description Improper neutralization of use...
OESA-2021-1266 djvulibre security update
DjVu is a set of compression technologies, a file format, and a software platform for the deliveryover the Web of digital documents, scanned documents, and high resolution images.DjVu documents download and display extremely quickly, and look exactly the same on all platforms with no compatibilit...
openSUSE 15 Security Update : djvulibre (openSUSE-SU-2021:1641-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1641-1 advisory. - A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filterbv via crafted djvu file may lead to...
The vulnerability of the DJVU::DjVuTXT::decode() function in libraries and utilities for viewing, creating, and editing DjVu files, DjVuLibre. This allows attackers to cause service interruptions.
The vulnerability of the DJVU::DjVuTXT::decode function in libraries and utilities for viewing, creating, and editing DjVu files is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using a special...
OPENSUSE-SU-2021:1641-1 Security update for djvulibre
This update for djvulibre fixes the following issues: - CVE-2021-32490 bsc1185895: Out of bounds write in function DJVU:filterbv via crafted djvu file - CVE-2021-32491 bsc1185900: Integer overflow in function render in tools/ddjvu via crafted djvu file - CVE-2021-32492 bsc1185904: Out of bounds...
OPENSUSE-SU-2021:1948-1 Security update for djvulibre
This update for djvulibre fixes the following issues: - CVE-2021-3500: Stack overflow in function DJVU:DjVuDocument:getdjvufile via crafted djvu file bsc1186253...
[SECURITY] Fedora 34 Update: djvulibre-3.5.27-30.fc34
DjVu is a web-centric format and software platform for distributing documents and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution picture s. DjVu content downloads faster, displays and renders faster,...
[SECURITY] Fedora 33 Update: djvulibre-3.5.27-28.fc33
DjVu is a web-centric format and software platform for distributing documents and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution picture s. DjVu content downloads faster, displays and renders faster,...
Fedora: Security Advisory for djvulibre (FEDORA-2021-7514c11a37)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...