386 matches found
DSA-3537-1 imlib2 - security update
Bulletin has no description...
GNU Image Manipulation Program (GIMP) Installed (Mac OS X)
Binary data macosxgimpinstalled.nbin...
CVE-2015-8766
Multiple cross-site scripting XSS vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 emailsendmailfromname, 2 emailsendmailfromaddress, 3 emailsmtpfromname, 4 emailsmtpfromaddress, 5...
[SECURITY] Fedora 23 Update: ImageMagick-6.9.2.7-1.fc23
ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...
WordPress Plugin Simple Image Manipulator 1.0 - Arbitrary File Download
WordPress Plugin Simple Image Manipulator 1.0 - Arbitrary File Download Title: Remote file download in simple-image-manipulator v1.0 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-16 Download Site: https://wordpress.org/plugins/simple-image-manipulator Vendor:...
WideImage 11.02.19 Cross Site Scripting
WideImage Demo Code Cross Site Scripting XSS Description: WideImage is an object-oriented library for image manipulation. It requires PHP 5.2+ with GD2 extension. The library provides a simple way to loading, manipulating and saving images in the most common image formats. Type of vulnerability:...
CVE-2014-1836
Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the imagepath parameter in a cancel action...
WordPress Plugin Wp-ImageZoom 1.1.0 - Multiple Vulnerabilities
WordPress Plugin Wp-ImageZoom 1.1.0 - Multiple Vulnerabilities Exploit Title: wp-imagezoom Remote Image Upload Google Dork: filetype:php inurl:"/wp-content/plugins/wp-imagezoom" & inurl:"?id=" Date: 06.06.2015 Exploit Author: T3N38R15 Software Link:...
[SECURITY] Fedora 21 Update: batik-1.8-0.18.svn1230816.fc21
Batik is a Javatm technology based toolkit for applications that want to use images in the Scalable Vector Graphics SVG format for various purposes, such as viewing, generation or manipulation...
[SECURITY] [DLA 228-1] exactimage security update
Package : exactimage Version : 0.8.1-3+deb6u4 CVE ID : CVE-2015-3885 Debian Bug : 786785 A vulnerability has been discovered in the ExactImage image manipulation programs. CVE-2015-3885 Eduardo Castellanos discovered an Integer overflow in the dcraw version included in ExactImage. This...
Forpix - Software for detecting affine image files
forpix is a forensic program for identifying similar images that are no longer identical due to image manipulation. Hereinafter I will describe the technical background for the basic understanding of the need for such a program and how it works. From image files or files in general you can create...
[SECURITY] Fedora 21 Update: ImageMagick-6.8.8.10-6.fc21
ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...
Amazon Linux AMI : docker (ALAS-2014-461)
Path traversal attacks are possible in the processing of absolute symlinks. In checking symlinks for traversals, only relative links were considered. This allowed path traversals to exist where they should have otherwise been prevented. This was exploitable via both archive extraction and through...
MGASA-2014-0426 Updated qemu packages fix multiple security vulnerabilities
Updated qemu packages fix security vulnerabilities: Michael S. Tsirkin discovered that QEMU incorrectly handled vmxnet3 devices. A local guest could possibly use this issue to cause a denial of service, or possibly execute arbitrary code on the host CVE-2013-4544. Multiple integer overflow, input...
GIMP 2.6 script-fu < 2.8.0 - Buffer Overflow Vulnerability
No description provided by source. There is a buffer overflow in the script-fu server component of GIMP the GNU Image Manipulation Program in all 2.6 versions Windows and Linux versions affecting both the script-fu console and the script-fu network server. A crafted msg to the script-fu server...
All Enthusiast PhotoPost PHP Pro 5.0 adm-photo.php Arbitrary Image Manipulation
No description provided by source. source: http://www.securityfocus.com/bid/12779/info PhotoPost PHP Pro is a web-based image gallery application written in PHP. It can be implemented on any platform that supports PHP script execution. Multiple remote vulnerabilities affect All Enthusiast PhotoPo...
CVE-2014-0134
OpenStack Nova shows a vulnerability in 2013.2 (before 2013.2.3) and Icehouse (before 2014.1) when using libvirt to spawn images with use_cow_images=false: remote authenticated users could read certain compute host files by overwriting an instance disk with a crafted image. The affected component...
EasyTalk任意文件删除漏洞（可删除内置waf）
简要描述： EasyTalk任意文件删除漏洞 详细说明： EasyTalk存在两处任意文件删除漏洞。 一处是在SettingAction.class.php文件的doface函数处，已经有人提交过了。 这里是在GuideAction.class.php文件的doface2函数处。 //头像裁剪处理 public function doface2 $ysw=$POST'ysw'; if $ysw660 $zoom=intval$ysw/660; else $zoom=1; $x=$POST'x'$zoom; $y=$POST'y'$zoom; $w=$POST'w'$zoom;...
Fedora Update for gimp FEDORA-2013-22701
Check for the Version of gimp OpenVAS Vulnerability Test Fedora Update for gimp FEDORA-2013-22701 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...