CVE-2026-50787

CVE-2026-50787 — e-SIC Livre의 통제되지 않은 리소스 소비 요약 e-SIC Livre esiclivre 의 CAPTCHA 생성 구성 요소에 리소스 소비 취약점이 존재합니다. 취약한 엔드포인트는 CAPTCHA 이미지 크기, 글꼴 크기 및 렌더링할 문자 수를 정의하는 사용자 제어 매개변수를 허용합니다. 이러한 값은 적절한 범위 검사 없이 사용됩니다. 인증되지 않은 원격 공격자는 과도하게 큰 값을 제공하여 이미지 생성 및 텍스트 렌더링 중에 애플리케이션이 상당한 메모리와 CPU 리소스를 소비하도록 할 수 있습니...

e-SIC Livre 安全漏洞

e-SIC Livre is an open-source citizen information request system developed by esiclivre. Versions of e-SIC Livre prior to 0.2.2 contained security vulnerabilities. These vulnerabilities stemmed from improper handling of the cpfcnpj parameter in the Solicitante::resetaSenha function, which could...

EUVD-2017-6834

Malware in sbrugna...

EUVD-2017-6833

Malware in sbrugna...

EUVD-2017-6827

Malware in sbrugna...

EUVD-2017-6832

Malware in sbrugna...

EUVD-2017-6831

Malware in sbrugna...

EUVD-2024-21772

Malicious code in bioql PyPI...

CVE-2024-24350

File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component...

CVE-2017-15373

E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...

CVE-2024-24350

File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component...

CVE-2024-24350

File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component...

Unrestricted file upload

File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component...

Software Publico e-Sic Livre Code Issue Vulnerability

Software Publico e-Sic Livre is a solution from the Brazilian company Software Publico designed to manage public services based on Q&A. A code issue vulnerability exists in Software Publico e-Sic Livre v.2.0 and prior versions, which stems from the presence of a file upload vulnerability that cou...

CVE-2024-24350

CVE-2024-24350 corresponds to a file upload vulnerability in Software Publico e-Sic Livre, affecting version 2.0 and earlier. The issue arises from the extension filtering component, enabling a remote attacker to upload crafted payloads that may lead to arbitrary code execution. The NVD/Red Hat a...

CVE-2024-24350

File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component...

CVE-2024-24350: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component...

PT-2024-20371 · Software Publico · E-Sic Livre

Name of the Vulnerable Software and Affected Versions: Software Publico e-Sic Livre versions 2.0 and earlier Description: The issue allows a remote attacker to execute arbitrary code via the extension filtering component. This is a result of a File Upload vulnerability. Recommendations: For...

E-Sic SQL Injection Vulnerability (CNVD-2018-10603)

E-Sic is a Brazilian electronic system for citizen information. A SQL injection vulnerability exists in E-Sic version 1.0. A remote attacker could exploit this vulnerability to execute arbitrary SQL commands...

E-Sic Authentication Bypass Vulnerability

E-Sic is a Brazilian electronic system for citizen information. An authentication bypass vulnerability exists in the /index aka login URI in E-Sic version 1.0. An attacker can exploit this vulnerability to bypass authentication and gain access to the panel with the 'username' and 'password'...