3241 matches found
metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.imaging.tiff.TiffReader.processIfd
Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=4730817556119552 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...
UnRAR Backlink Vulnerability
UnRAR is a command that decompresses files with rar extension. A security vulnerability exists in UnRAR versions prior to 6.2.3. An attacker exploited the vulnerability to extract files outside the target folder via symbolic links...
metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.imaging.tiff.TiffReader.processIfd
Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=4507497474686976 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...
metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.imaging.quicktime.QuickTimeReader.processAtoms
Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=4709810764120064 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...
metadata-extractor:ImageMetadataReaderFuzzer: Security exception with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6375667852509184 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL Sanitizer:...
metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.imaging.quicktime.QuickTimeReader.processAtoms
Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=5220947557482496 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...
SQL injection in some Admin Sort functions
Description SQL injection due to unsanitized concatenating strings into ORDER BY clause, 'sort' parameter Proof of Concept Log in as an admin, go to Admin Translations or Application Logger functions, and perform a sort action Observer the request on Burpsuite and injection point is the 'sort'...
metadata-extractor:ImageMetadataReaderFuzzer: Security exception in java.base/java.util.ArrayList.<init>
Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=4765414132154368 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...
metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.lang.SequentialReader.getNullTerminatedBytes
Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=5543710230970368 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...
New All-in-One "EvilExtractor" Stealer for Windows Systems Surfaces on the Dark Web
A new "all-in-one" stealer malware named EvilExtractor also spelled Evil Extractor is being marketed for sale for other threat actors to steal data and files from Windows systems. "It includes several modules that all work via an FTP service," Fortinet FortiGuard Labs researcher Cara Lin said. "I...
CVE-2022-20532
In parseTrackFragmentRun of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
Number withdrawal
XpdfReader is XpdfReader open source a free PDF viewer and toolkit . Including text extractor , image converter , HTML converter and so on. This CVE number has been withdrawn...
Path Traversal
binwalk is vulnerable to Path Traversal. By crafting a malicious PFS file, an attacker is able to get the PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode which may result in remote code executions...
com.opensearchserver:oss-text-extractor (1.0.0), io.undertow:undertow-servlet (1.0.17.final) +1 more potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.17.final)
io.undertow:undertow-core MAVEN version 1.0.17.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.opensearchserver:oss-text-extractor 1.0.0 - io.undertow:undertow-servlet 1.0.17.final -...
OpenKM code-related vulnerabilities
OpenKM is a document management system from OpenKM Spain. The system provides features such as version control, document history and file sharing. A security vulnerability exists in OpenKM version v6.3.10, which originated from a vulnerability that allows an attacker to obtain sensitive informati...
PeaZip security vulnerability
PeaZip is a free Zip software and Rar extractor from the individual developer Giorgio Tani. A security vulnerability exists in Giorgio Tani peazip version v.9.0.0, which originates from a denial of service that allows an attacker to cause a denial of service via the end-of-archive marking feature...
SUSE CVE-2015-7213
Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow...
SUSE CVE-2017-7994
The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...
XSS Stored in the email address
Description Hello, I have located an xss stored by performing the following step: 1 - Go to tools 2 - GDPR Data Extractor 3 - Insert the payload into the email address 4 - click in send emails Proof of Concept...
Malicious code in wf-extract-text-in-image2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cd6fc1170a3ada1d746fc52e031d5c161e68ecaccf1383924617a33f88f75a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...