The vulnerability in the implementation of the readline component of the EPSImageFile library used in the Pillow image processing library lies in insufficient input validation. This allows a malicious actor to cause a service failure.

The vulnerability of the readline implementation in the EPSImageFile component of the Pillow image processing library is related to the use of a quadratic string accumulation method during line termination searches. Exploiting this vulnerability could allow an attacker to cause a service failure ...

Django跨站脚本执行和两个拒绝服务漏洞

BUGTRAQ ID: 54742 CVE ID: CVE-2012-3442,CVE-2012-3443,CVE-2012-3444 Django是Python编程语言驱动的一个开源Web应用程序框架。 Django 1.3和1.4及其他版本在实现上存在两个安全漏洞，可被恶意用户利用执行跨站脚本攻击和拒绝服务。 1）验证框架中的login或logout试图的重定向功能内传递的输入，在重定向到"data:" scheme URL后没有正确过滤就返回给用户。 2）解压图形时，ImageField类中的图形验证中存在错误，可被利用消耗大量内存资源。...

PHP Melody 1.5.3 - Arbitrary File Upload Injection

PHP Melody 1.5.3 - Arbitrary File Upload Injection --------------------------------------------------- PHP Melody 1.5.3 remote injection upload file --------------------------------------------------- + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com + Group : LatinHackTeam +...

CVE-2007-0261: Undefined Security Weakness

snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, as demonstrated by changing an administrative password via the changeup task, and by uploading PHP code via the imagefile parameter...