3854 matches found
Church Management System 1.0 Shell Upload / SQL Injection
Exploit Title: Church Management System 1.0 - SQL Injection Authentication Bypass + Arbitrary File Upload + RCE Date: 05-07-2021 Exploit Author: Eleonora Guardini eleguardini93 at gmail dot com or eleonora.guardini at dedagroup dot com Vendor Homepage: https://www.sourcecodester.com Software Link...
Church Management System 1.0 - SQL Injection (Authentication Bypass) + Arbitrary File Upload + RCE
Exploit Title: Church Management System 1.0 - SQL Injection Authentication Bypass + Arbitrary File Upload + RCE Date: 05-07-2021 Exploit Author: Eleonora Guardini eleguardini93 at gmail dot com or eleonora.guardini at dedagroup dot com Vendor Homepage: https://www.sourcecodester.com Software Link...
PT-2024-11315 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 20798dfe249a Description: A NULL dereference vulnerability has been resolved in the Linux kernel. The issue occurs in the nfsd component, specifically in the nfs3svc encode getaclres function, where the dentry m...
PT-2021-7930 · Adobe · Media Encoder
Name of the Vulnerable Software and Affected Versions: Adobe Media Encoder versions 15.2 and earlier Description: The issue is related to an out-of-bounds read that could lead to the disclosure of sensitive memory. This could allow an attacker to bypass mitigations such as ASLR. Exploitation...
The vulnerability of the Adobe Media Encoder application, related to reading data beyond the buffer memory boundaries, allows attackers to exploit their privileges.
The vulnerability of the Adobe Media Encoder application relates to reading data beyond the boundaries of memory buffers. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected information through a specially crafted PDF file...
ALPINE-CVE-2021-0561
In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
Out-of-bounds
In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
OESA-2021-1234 openjpeg2 security update
OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group JPEG. Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000...
Fedora: Security Advisory for go-avif (FEDORA-2021-1c3f7963a5)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Weak Password Vulnerability in Streaming Media Encoder Professional Edition of Hefei Duck Information Technology Co.
Hefei Duck Information Technology Co., Ltd. is a company focusing on the research of audio and video compression, transmission and analysis algorithms. A weak password vulnerability exists in Hefei Tuduck Information Technology Limited Streaming Encoder Professional Edition, which can be exploite...
Unauthorized Access Vulnerability in AXIS Q7424-R Video Encoder
Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS Q7424-R Video Encoder, which can be exploited by attackers to obtain sensitive information...
[SECURITY] Fedora 34 Update: go-avif-0.1.0-8.fc34
Go-avif implements AVIF AV1 Still Image File Format encoder for Go using libaom, the high quality AV1 codec...
[SECURITY] Fedora 34 Update: aom-3.1.1-1.fc34
The Alliance for Open Media=EF=BF=BD=EF=BF=BD=EF=BF=BDs focus is to deliver a next-generation video format that is: - Interoperable and open; - Optimized for the Internet; - Scalable to any modern device at any bandwidth; - Designed with a low computational footprint and optimized for hardware; -...
Unauthorized Access Vulnerability in AXIS M7014 Video Encoder
Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS M7014 Video Encoder, which can be exploited by attackers to obtain sensitive information...
Unauthorized Access Vulnerability in AXIS P7214 Video Encoder
Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS P7214 Video Encoder, which can be exploited by attackers to obtain sensitive information...
SUSE SLES11 Security Update : jasper (SUSE-SU-2021:14627-1)
The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14627-1 advisory. - There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary...
SUSE: Security Advisory (SUSE-SU-2016:1290-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PUB-A-174302683
In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...