iGPU-Leak

CVE-2019-14615: iGPU-Leak 脆弱性 ======== Wenjian He, Wei Zhang, Sharad Sinha and Sanjeev Das. iGPU Leak: Intel 統合 GPU における情報漏洩脆弱性。25th Asia and South Pacific Design Automation Conference ASP-DAC'20 の proceedings に掲載。 PDF を表示 スライドを表示 何が起きたのか? Intel 統合 GPU iGPU にセキュリティ上の問題が見つかりました。 これにより、攻撃者は iGPU...

CVE-2023-21939

JDK CVE-2023-21939 記事リンク これはJDK CVE-2023-21939です。 8u371より低いJDKバージョンを使用してください。 JDK + Apache XML Graphics root@kitploit: org.apache.xmlgraphics batik-swing 1.15 このRCEを再現する手順: 1 XmlServer.java を実行します。 2 JarServer.java を実行します。 3 テスト用に JarRCE.java を実行し、RCE が成功します。 スクリーンショット: JDK + Apache XML Graphics ...

CVE-2017-0108

Microsoft Office 2007 SP3, 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Live Meeting 2007, Silverlight 5, Windows Vista SP2, Windows Server 2008 SP2 및 R2 SP1, Windows 7 SP1의 Windows 그래픽 구성 요소에서 원격 공격자가 조작된 웹 사이트를 통해 임의 코드를 실행할 수 있는 취약점입니다. "Graphics Component Remote...

Joomla! Component Graphics 1.0.6 - Local File Inclusion

A directory traversal vulnerability in graphics.php in the Graphics comgraphics component 1.0.6 and 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1653 info: name: Joomla! Component...

WordPress Mapplic <= 6.1 / Mapplic Lite <= 1.0 - Authenticated Stored XSS via SVG File Upload

The Mapplic and Mapplic Lite plugins for WordPress are vulnerable to Stored Cross-Site Scripting via arbitrary URL injection in versions up to and including 6.1 and 1.0 respectively. Authenticated users with author-level permissions can inject arbitrary remote URLs for SVG map files. When a user...

php-jpeg-injector

php-jpeg-injector Injects php payloads into jpeg images. Related to this post. Use Case You have a web application that runs a jpeg image through PHP's GD graphics library. Description This script injects PHP code into a specified jpeg image. The web application will execute the payload if it...

SAP Internet Graphics Server (IGS) - XML External Entity Injection

SAP Internet Graphics Servers IGS running versions 7.20, 7.20EXT, 7.45, 7.49, or 7.53 has two XML external entity injection XXE vulnerabilities within the XMLCHART page - CVE-2018-2392 and CVE-2018-2393. These vulnerabilities occur due to a lack of appropriate validation on the Extension HTML tag...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

firefox: Race condition, use-after-free in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Race condition, use-after-free in the Graphics component...

firefox: Integer overflow in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Graphics component...

firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Graphics: ImageLib component...

firefox: thunderbird: Use-after-free in the Graphics: ImageLib component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: ImageLib component...

firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Graphics: CanvasWebGL component...

firefox: thunderbird: Privilege escalation due to use-after-free in the Graphics: Canvas2D component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to use-after-free in the Graphics: Canvas2D component...

firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component...

firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics: CanvasWebGL component...

firefox: thunderbird: Information disclosure in the Graphics: Text component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics: Text component...

firefox: thunderbird: Information disclosure in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics component...

firefox: thunderbird: Use-after-free in the Graphics: Text component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: Text component...