Ghostscript Command Execution / Format String

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ghostscript Command Execution via Format String', 'Description' = %q This module exploits a format string vulnerability in Ghostscript versions...

BIT-PILLOW-2021-28677

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could...

eps-imathias.gr Cross Site Scripting vulnerability OBB-3865609

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

eps-lcp.net Improper Access Control vulnerability OBB-3858078

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Fedora: Security Advisory for atril (FEDORA-2024-59a7d96d84)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: atril-1.26.2-2.fc38

Mate-document-viewer is simple document viewer. It can display and print Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS, DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard,...

eps-time.com Cross Site Scripting vulnerability OBB-3848111

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[SECURITY] Fedora 39 Update: atril-1.26.2-1.fc39

Mate-document-viewer is simple document viewer. It can display and print Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS, DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard,...

Exploit for Files or Directories Accessible to External Parties in Artifex Ghostscript

CVE-2023-36664 : Ghostscript remote code execution Proof of c...

Arbitrary Code Injection

pretix is vulnerable to Arbitrary Code Injection. The vulnerability is caused by allowing parsing of EPS Encapsulated PostScript files in various features of the application. An attacker can exploit this to execute arbitrary code by sending a specially crafted EPS file...

GHSA-9JVX-P6MQ-FW4V pretix allows Pillow to parse EPS files

pretix before 2023.7.2 allows Pillow to parse EPS files...

pretix allows Pillow to parse EPS files

pretix before 2023.7.2 allows Pillow to parse EPS files...

CVE-2023-44464

pretix before 2023.7.2 allows Pillow to parse EPS files...

Code injection

pretix before 2023.7.2 allows Pillow to parse EPS files...

CVE-2023-44464

The CVE-2023-44464 issue affects pretix prior to 2023.7.2 where Pillow can parse EPS files, enabling an attacker-controlled EPS payload to potentially compromise the application. Affected product: pretix (ticketing system) with Pillow EPS parsing as the root cause. Reported impacts in connected s...

CVE-2023-44464

pretix before 2023.7.2 allows Pillow to parse EPS files...

CVE-2023-44464

pretix before 2023.7.2 allows Pillow to parse EPS files...

CVE-2023-44464

pretix before 2023.7.2 allows Pillow to parse EPS files...

CVE-2020-21710

A divide by zero issue discovered in epsprintpage in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file...

CVE-2023-31497

CVE-2023-31497 affects Seqrite Endpoint Security (EPS) from Quick Heal Technologies Limited, with all versions prior to 8.0 vulnerable to local privilege escalation to root via a crafted binary. The Red Hat/NVD/PT reports confirm a root-priority impact (privilege escalation) through incorrect acc...