7 matches found
Medium: python-pillow
Issue Overview: Affected versions of this package are vulnerable to Denial of Service DoS when using arbitrary strings as text input and the number of characters passed into PIL.ImageFont.ImageFont.getmask is over a certain limit. This can lead to a system crash. Affected versions of this package...
Malicious code in getmask (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 56bb2e3ee3f4dab97ea151cebd0f217d004f29ec846ca28dcb7af558d45b34c5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-3621 Malicious code in getmask (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 56bb2e3ee3f4dab97ea151cebd0f217d004f29ec846ca28dcb7af558d45b34c5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
jocms SQL注入漏洞
jocms is an easy-to-edit simple CMS for mxgbr individual developers. A security vulnerability exists in version 0.8 of jocms, which is caused by SQL injection and can be exploited by remote attackers to run arbitrary SQL commands and view sensitive information via the jojsoncheck function in...
CVE-2021-44395
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetMask param is not object. An attacker can send an HTTP request to trigger this vulnerability...
OSV-2020-2259 Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntry::GetMask
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28556 Crash type: Stack-buffer-overflow READ 4 Crash state: ot::MeshCoP::ChannelMaskEntry::GetMask ot::MeshCoP::ChannelMaskTlv::GetChannelMask ot::MeshCoP::Dataset::ConvertTo...
OSV-2020-380 Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntry::GetMask
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13619 Crash type: Stack-buffer-overflow READ 4 Crash state: ot::MeshCoP::ChannelMaskEntry::GetMask ot::MeshCoP::ChannelMaskTlv::GetChannelMask ot::MeshCoP::ChannelMaskTlv::GetChannelMask...