EUVD-2021-25114

Malware in sbrugna...

CVE-2021-38675

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running Image2PDF. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Image2PDF: Image2PDF 2.1.5 2021/08/17 and la...

CVE-2021-38675

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running Image2PDF. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Image2PDF: Image2PDF 2.1.5 2021/08/17 and la...

CVE-2021-38675

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running Image2PDF. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Image2PDF: Image2PDF 2.1.5 2021/08/17 and la...

Cross site scripting

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running Image2PDF. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Image2PDF: Image2PDF 2.1.5 2021/08/17 and la...

CVE-2021-38675 Stored XSS Vulnerability in Image2PDF

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running Image2PDF. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Image2PDF: Image2PDF 2.1.5 2021/08/17 and la...

CVE-2021-38675

CVE-2021-38675 is a cross-site scripting (XSS) vulnerability affecting QNAP Image2PDF. The issue allows remote attackers to inject malicious code via the affected Image2PDF functionality on QNAP devices. The vulnerability is mitigated by updating to Image2PDF 2.1.5 (2021/08/17) and later. Practic...

PT-2021-22255

Name of the Vulnerable Software and Affected Versions Image2PDF versions prior to 2.1.5 Description A cross-site scripting XSS issue has been reported, allowing remote attackers to inject malicious code. Recommendations For versions prior to 2.1.5, update to version 2.1.5 or later to resolve the...

CVE-2021-38675: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running Image2PDF. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Image2PDF: Image2PDF 2.1.5 2021/08/17 and la...

Qnap Image2PDF 跨站脚本漏洞

Qnap Image2PDF is a Windows-based application from China Weilian Technology Qnap. It is used to organize image files, providing quick access and viewing. Qnap Image2PDF suffers from a cross-site scripting vulnerability that originates from Image2PDF allowing remote attackers to inject malicious...

Memory Corruption Vulnerability in YouSeeTech Image2PDF Software

YouSeeTech Image2PDF software is an image to PDF file conversion tool. A memory corruption vulnerability exists in Uview Image2PDF Software version 1.0.0.1. Allows an attacker to cause the program to crash by constructing a malformed image...

VeryPDF Image2PDF Converter SEH Buffer Overflow

Exploit Title: VeryPDF Image2PDF Converter SEH Buffer Overflow Date: 10-7-2015 Software Link: http://www.verypdf.com/tif2pdf/img2pdf.exe Exploit Author: Robbie Corley Platform Tested: Windows 7 x64 Contact: [email protected] Website: CVE: Category: Local Exploit Description: The title paramet...

VeryPDF Image2PDF Converter SEH Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: VeryPDF Image2PDF Converter SEH Buffer Overflow Date: 10-7-2015 Software Link: http://www.verypdf.com/tif2pdf/img2pdf.exe Exploit Author: Robbie Corley Platform Tested: Windows 7 x64 Contact: email protected Website: CVE:...

VeryPDF Image2PDF Converter - Local Buffer Overflow (SEH)

Exploit Title: VeryPDF Image2PDF Converter SEH Buffer Overflow Date: 10-7-2015 Software Link: http://www.verypdf.com/tif2pdf/img2pdf.exe Exploit Author: Robbie Corley Platform Tested: Windows 7 x64 Contact: [email protected] Website: CVE: Category: Local Exploit Description: The title paramet...

Image Viewer CP ActiveX 控件Image2PDF栈缓冲区溢出漏洞

CVE ID: CVE-2010-5194 Image Viewer CP是图形浏览器activex控件。 Viscom Image Viewer CP Pro 8.0、Gold 5.5、Gold 6.0及更早版本的SCRIBBLE.ScribbleCtrl.1 ActiveX控件Image2PDF函数存在栈缓冲区溢出，通过超长的strPDFFile参数可导致执行任意代码。 0 Viscom Softwares Image Viewer CP 厂商补丁： Viscom Softwares ----------------...

Stack overflow

Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control ImageViewer2.ocx in Viscom Image Viewer CP Pro 8.0, Gold 5.5, Gold 6.0, and earlier allows remote attackers to execute arbitrary code via a long strPDFFile parameter...

CVE-2010-5194

Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control ImageViewer2.ocx in Viscom Image Viewer CP Pro 8.0, Gold 5.5, Gold 6.0, and earlier allows remote attackers to execute arbitrary code via a long strPDFFile parameter...

CVE-2010-5194

Vulnerability overview (CVE-2010-5194). Stack-based buffer overflow in the Image2PDF function of the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) shipped with Viscom Image Viewer CP Pro 8.0, Gold 5.5, Gold 6.0 and earlier. Exploitation via a long strPDFFile parameter can allow remot...

Image Viewer CP Gold 5.5 Buffer Overflow

Image Viewer CP gold v5.5 Buffer Overflow Found by: bz1p AT bshellz.net Impact: Low, NOT marked safe for scripting or initializing CVE: ? 0day msf exploitimageviewercpgold Sending exploit to 172.17.120.211:1061... Sending stage 749056 bytes to 172.17.120.211 Meterpreter session 1 opened...

Viscom Image Viewer CP Gold 5.5 - Image2PDF() Remote Buffer Overflow (Metasploit)

Viscom Image Viewer CP Gold 5.5 - Image2PDF Remote Buffer Overflow Metasploit Image Viewer CP gold v5.5 Buffer Overflow Found by: bz1p AT bshellz.net Impact: Low, NOT marked safe for scripting or initializing CVE: ? 0day msf exploitimageviewercpgold Sending exploit to 172.17.120.211:1061... Sendi...