28 matches found
EUVD-2026-41901
Pillow GdImageFile.open: image dimensions accepted without decompressionbombcheck...
CVE-2026-55380
Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile.open read image dimensions from the GD 2.x header and stored them in self.size without calling Image.decompressionbombcheck, allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This iss...
CVE-2026-11526
GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open of filename arguments in makefilehandle. GD::Image::makefilehandle opens a filename argument with Perl's 2-arg open, so a filename that begins or ends with a pipe "| cmd", "cmd |" or begins with a...
NanaZip security vulnerability
NanaZip is a compression software open-source by the M2-Team. Versions of NanaZip from 5.0.1252.0 to 6.0.1698.0 contained security vulnerabilities. These vulnerabilities stemmed from the Open method in the littlefs file system image resolver, which directly read the BlockCount value controlled by...
PT-2026-38895
Summary Submodule name validation bypass plus missing validation in production code paths allows path traversal via crafted .gitmodules. Combined with a trust inheritance flaw in Submodule::open, this enables reading arbitrary git repository configs including credentials from traversed paths with...
kernel: Input: synaptics - fix crash when enabling pass-through port
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics - fix crash when enabling pass-through port When enabling a pass-through port an interrupt might come before psmouse driver binds to the pass-through port. However synaptics sub-driver tries to access psmouse...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: Input: Synaptics – fix for a crash that occurs when enabling the pass-through port. When enabling a pass-through port, an interrupt may occur before the psmouse driver binds to the pass-through port. However, the Synaptics...
Palo Alto Networks GlobalProtect App Arbitrary Command Execution
The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to an open and insecure ActiveX method. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
SUSE CVE-2022-48811
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: don't release napi in ibmvnicopen If ibmvnicopen encounters an error such as when setting link state, it calls releaseresources which frees the napi structures needlessly. Instead, have ibmvnicopen only clean up the work...
Nokogiri: Command injection
Background Nokogiri is an HTML, XML, SAX, and Reader parser. Description A command injection vulnerability in Nokogiri allows commands to be executed in a subprocess by Ruby’s Kernel.open method. Processes are vulnerable only if the undocumented method Nokogiri::CSS::Tokenizerloadfile is being...
Simple Ruby Exec with Open and Pipe
I was researching something else and thought this was a cool way to execute a command through the open method in ruby: 1 | open"|CMD" ---|--- The key is starting the open with pipe. For example, 1 | open"|ls" ---|--- Or to exec and print the result in one line: 1 | open"|ls".each |out| puts out...
Simple Ruby Exec with Open and Pipe
I was researching something else and thought this was a cool way to execute a command through the open method in ruby: 1 | open"|CMD" ---|--- The key is starting the open with pipe. For example, 1 | open"|ls" ---|--- Or to exec and print the result in one line: 1 | open"|ls".each |out| puts out...
Hewlett-Packard POS Keyboard OPOS Drivers OPOSPOSKeyboard.ocx Open Method Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard POS Keyboard OPOS Drivers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis...
CVE-2015-1495: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in Motorola Scanner SDK allow remote attackers to execute arbitrary code via a crafted string to the Open method in 1 IOPOSScanner.ocx or 2 IOPOSScale.ocx...
PT-2015-5330
Name of the Vulnerable Software and Affected Versions Motorola Scanner SDK versions affected versions not specified Description The issue is related to multiple stack-based buffer overflows in the Motorola Scanner SDK, which can be exploited by remote attackers to execute arbitrary code. This is...
CVE-2014-8269
Multiple stack-based buffer overflows in 1 HWOPOSScale.ocx and 2 HWOPOSSCANNER.ocx in Honeywell OPOS Suite before 1.13.4.15 allow remote attackers to execute arbitrary code via a crafted file that is improperly handled by the Open method...
Stack overflow
Multiple stack-based buffer overflows in 1 HWOPOSScale.ocx and 2 HWOPOSSCANNER.ocx in Honeywell OPOS Suite before 1.13.4.15 allow remote attackers to execute arbitrary code via a crafted file that is improperly handled by the Open method...
CVE-2014-8269
Multiple stack-based buffer overflows in 1 HWOPOSScale.ocx and 2 HWOPOSSCANNER.ocx in Honeywell OPOS Suite before 1.13.4.15 allow remote attackers to execute arbitrary code via a crafted file that is improperly handled by the Open method...
CVE-2014-8269: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in 1 HWOPOSScale.ocx and 2 HWOPOSSCANNER.ocx in Honeywell OPOS Suite before 1.13.4.15 allow remote attackers to execute arbitrary code via a crafted file that is improperly handled by the Open method...
PT-2014-8442
Name of the Vulnerable Software and Affected Versions Honeywell OPOS Suite versions prior to 1.13.4.15 Description The issue is related to multiple stack-based buffer overflows in the HWOPOSScale.ocx and HWOPOSSCANNER.ocx components of the Honeywell OPOS Suite. This allows remote attackers to...