openSUSE Security Update : GraphicsMagick (openSUSE-2017-214)

This update for GraphicsMagick fixes several issues. These security issues were fixed : - CVE-2016-10048: Arbitrary module could have been load because relative path were not escaped bsc1017310 - CVE-2016-10050: Corrupt RLE files could have overflowed a heap buffer due to a missing offset check...

CVE-2016-10069

coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service application crash via a mat file with an invalid number of frames...

Debian Security Advisory DSA 3708-1 (mat - security update)

Hartmut Goebel discovered that MAT, a toolkit to anonymise/remove metadata from files did not remove metadata from images embededed in PDF documents. OpenVAS Vulnerability Test $Id: deb3708.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3708-1 using nvtgen 1.0 Script...

Debian: Security Advisory (DSA-3708-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3708-1 : mat - security update

Hartmut Goebel discovered that MAT, a toolkit to anonymise/remove metadata from files did not remove metadata from images embededed in PDF documents. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

[SECURITY] [DSA 3708-1] mat security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3708-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 07, 2016 https://www.debian.org/security/faq -...

DSA-3708-1 mat - security update

Bulletin has no description...

Debian DLA-650-1 : mat security update

An implementation flaw was discovered in mat, the metadata anonymisation toolkit. The implementation of PDF support lacks support to anonymize the metadata in embedded images. As there is no easy fix for this flaw, it was decided that PDF support will be removed altogether from mat for the time...

[SECURITY] [DLA 650-1] mat security update

Package : mat Version : 0.3.2-1+deb7u1 Debian Bug : 826101 An implementation flaw was discovered in mat, the metadata anonymisation toolkit. The implementation of PDF support lacks support to anonymize the metadata in embedded images. As there is no easy fix for this flaw, it was decided that PDF...

DLA-650-1 mat - security update

Bulletin has no description...

PT-2017-1732

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.4-5 Description The issue is caused by insufficient input validation in the coders/mat.c file of ImageMagick, allowing remote attackers to cause a denial of service application crash via a mat file with an...

PT-2017-7721

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.4-0 Description A heap-based buffer overflow issue exists in the CalcMinMax function in coders/mat.c, allowing remote attackers to cause a denial of service, resulting in an out-of-bounds read and application...

PT-2017-1731

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.4-0 Description The issue is caused by an out-of-bounds read in the coders/mat.c file, allowing remote attackers to cause a denial of service via a crafted mat file. This can result in the application crashing...

Käpt'n Kaos - Fluch-O-Mat - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Käpt'n Kaos - Fluch-O-Mat published at the 'play' market has multiple vulnerabilities...

handla-mat-online.se XSS vulnerability

Vulnerable URL: http://www.handla-mat-online.se/mataffar-pa-natet/"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website...

DaFun Spirit 2.2.5 - Multiple Remote File Include Vulnerability

No description provided by source. \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- DaFun Spirit 2.2.5 Multiple Remote File Include Vulnerability Script: http://code.google.com/p/dafunspirit/downloads/list Author: mat Mail: [email protected]...

Raja Natarajan Guestbook 1.0 - Local File Inclusion Vulnerability

No description provided by source. Raja Natarajan GUestbook 1.0 Local File Inclusion Exploit App: http://sourceforge.net/projects/phpscript/files/phpscript/Raja%20Guestbook/guestbook1.0.zip/download Author: h0rd Vuln:...

How To Remove File Metadata

How To Remove File Metadata For those of you who want to remove file metadata from any shared data, you can use existing document or image editor software which typically have built-in metadata editing capability. In this tutorial, we will introduce a standalone metadata cleaner tool which is...

Raja Natarajan Guestbook 1.0 Local File Inclusion

Raja Natarajan GUestbook 1.0 Local File Inclusion Exploit App: http://sourceforge.net/projects/phpscript/files/phpscript/Raja%20Guestbook/guestbook1.0.zip/download Author: h0rd Vuln: http://127.0.0.1/guestbook/add.php?lang=../../../../../../../../../../../../../../../etc/passwd%00 Thx: cr4wl3r,...

Huron CMS 8 11 2007 - Authentication Bypass

Huron CMS 8 11 2007 - Authentication Bypass \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Huron CMS 8 11 2007 Auth Bypass SQL Injection Vulnerability Script: http://huroncms.googlecode.com/files/Huron28112007.zip Author: mat Mail: [email protected]...