EUVD-2017-8935

Malware in sbrugna...

rts-gbr.de Improper Access Control vulnerability OBB-3775115

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2017-17784

In GIMP 2.8.22, there is a heap-based buffer over-read in loadimage in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data...

CVE-2017-17784

In GIMP 2.8.22, there is a heap-based buffer over-read in loadimage in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data...

DEBIAN-CVE-2017-17784

In GIMP 2.8.22, there is a heap-based buffer over-read in loadimage in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data...

CVE-2017-17784

In GIMP 2.8.22, there is a heap-based buffer over-read in loadimage in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data...

CVE-2017-17784

CVE-2017-17784 affects GIMP 2.8.22 with a heap-based buffer over-read in the gbr import parser (load_image) caused by mishandling UTF-8 data. The connected documents corroborate the specific component and nature of the bug, and multiple advisories report the issue across various distributions (e....

CVE-2017-17784

In GIMP 2.8.22, there is a heap-based buffer over-read in loadimage in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data...

CVE-2017-17784

In GIMP 2.8.22, there is a heap-based buffer over-read in loadimage in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data...

GIMP gbr import parser heap buffer out-of-bounds read vulnerability

GIMP GNU Image Manipulation Program is a cross-platform open source image processing software developed by the GIMP team. The software enables a variety of image processing , including photo retouching , image compositing and image creation , etc. gbr import parser is one of the file import parse...

UBUNTU-CVE-2017-17784

In GIMP 2.8.22, there is a heap-based buffer over-read in loadimage in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data...

SuSE 10 Security Update : gimp (ZYPP Patch Number 7543)

A number of heap-based buffer overflows have been found in The Gimp affecting the PCX CVE-2011-1178, SGI, GBR and PAT CVE-2011-1782 plugins. The update fixes these security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

synType CMS Cross Site Scripting

Vulnerability ID: HTB22417 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinsyntypecmscommenttextfield.html Product: synType CMS Vendor: MindArray GbR Vulnerable Version: V.0.12.2 and Probably Prior Versions Vendor Notification: 03 June 2010 Vulnerability Type: Stored XSS Cross...

Stored XSS vulnerability in synType CMS comment text field

Vulnerability ID: HTB22417 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinsyntypecmscommenttextfield.html Product: synType CMS Vendor: MindArray GbR Vulnerable Version: V.0.12.2 and Probably Prior Versions Vendor Notification: 03 June 2010 Vulnerability Type: Stored XSS Cross...

bitscast-dos.txt

BitsCast 0.13.0 Remote Denial of Service Credits: gbr Tested on Windows XP SP2 BitsCast crashes when receiving a RSS 2.0 feed item with a invalid string in sub-element 'pubDate'. '../A' x 8, 'A/../' x 8, and others. PoC: Test Remote DoS PoC ../A../A../A../A../A../A../A../A../A../A../A../A...

BitsCast 0.13.0 (invalid string) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================================= BitsCast 0.13.0 invalid string Remote Denial of Service Exploit ================================================================= BitsCast 0.13.0 Remote Denial of Service Credits:...

BitsCast 0.13.0 (invalid string) Remote Denial of Service Exploit

No description provided by source. BitsCast 0.13.0 Remote Denial of Service Credits: gbr Tested on Windows XP SP2 BitsCast crashes when receiving a RSS 2.0 feed item with a invalid string in sub-element 'pubDate'. '../A' x 8, 'A/../' x 8, and others. PoC: ?xml version="1.0"? rss version="2.0"...

BitsCast 0.13.0 - invalid string Remote Denial of Service

BitsCast 0.13.0 Remote Denial of Service Credits: gbr Tested on Windows XP SP2 BitsCast crashes when receiving a RSS 2.0 feed item with a invalid string in sub-element 'pubDate'. '../A' x 8, 'A/../' x 8, and others. PoC: Test Remote DoS PoC ../A../A../A../A../A../A../A../A../A../A../A../A...

acFTP FTP Server 1.5 - RESTPBSZ Remote Denial of Service

acFTP FTP Server 1.5 - RESTPBSZ Remote Denial of Service acFTP 1.5 REST/PBSZ Denial of Service author: gbr mail: gabrielquadrosathotmail.com use IO::Socket; if!defined$ARGV0 print "Usage: $0 ip port\n"; exit; my $sock = new IO::Socket::INETPeerAddr = $ARGV0, PeerPort = $ARGV1, Proto = 'tcp' or di...