The vulnerability of the ReadPALMImage function (coder/palm.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to execute arbitrary code.

The vulnerability of the ReadPALMImage function in the coders/palm.c file of the cross-platform graphics library GraphicsMagick is related to a buffer overflow error when QuantumDepth equals 8. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

PT-2019-5860 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: The issue is related to the WritePALMImage function in the /coders/palm.c component of the ImageMagick console graphic editor. It is associated with an integer overflow value. Exploitation of...

PT-2019-5866 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: The issue is related to the PALM image coder in ImageMagick, which makes an improper call to AcquireQuantumMemory in the WritePALMImage routine due to an offset of 256. This can cause an...

Chongqing Palm Pavilion Technology Co., Ltd Palm Pavilion App has information leakage vulnerability

Palm Pavilion APP is an internet parking service platform with real-time update of parking space information. App Palm Pavilion of Chongqing Palm Pavilion Technology Co., Ltd. has an information leakage vulnerability that can be exploited by attackers to obtain sensitive user information...

admin-palm-beach-county1.schoolsitepro.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-922846 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

Tianyi Life Jiangsu Telecom Palm Business Hall APP has multiple vulnerabilities

Tianyi Life Jiangsu Telecom Pocket Business Hall APP is a handheld service mobile software launched by Jiangsu Telecom. There are multiple vulnerabilities in Tianyi Life Jiangsu Telecom Handheld Business Office APP, which can be exploited by attackers to obtain sensitive user information...

xss vulnerability in palm bookstore app

Palm Book City is the official APP of Shenzhen Book City under Shenzhen Publishing and Distribution Group. There is an xss vulnerability in Pocket Book City APP, which can be exploited by an attacker to obtain an administrator cookie...

Information leakage vulnerability in the "personal data" section of the Palm Parent App

Palm Good Parent App is an educational software for parents. An information leakage vulnerability exists in the "Personal Information" section of Palm Parent App. Attackers can obtain information about other users by tampering with packets...

palm-stiftung.de XSS vulnerability

Open Bug Bounty ID: OBB-680141 Description| Value ---|--- Affected Website:| palm-stiftung.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

graphicsmagick/coder_PALM_fuzzer: Use-of-uninitialized-value in TransparentImageCallBack

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5134611630784512 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPALMfuzzer Fuzz target binary: coderPALMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

A week in security (February 5 – February 11)

Last week on Malwarebytes Labs, we featured a new Flash Player zero-day that has been found in recent targeted attacks. And we talked about a new trick to cripple browsers that came out of the hat of tech support scammers. We also covered several methods of stealing cryptocurrencies, including on...

e-services.co.palm-beach.fl.us XSS vulnerability

Open Bug Bounty ID: OBB-483714 Description| Value ---|--- Affected Website:| e-services.co.palm-beach.fl.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mylocal.palmbeachpost.com XSS vulnerability

Open Bug Bounty ID: OBB-466833 Description| Value ---|--- Affected Website:| mylocal.palmbeachpost.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-17783

In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8...

DEBIAN-CVE-2017-17783

In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8...

UBUNTU-CVE-2017-17783

In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8...

Huawei Palm Reader APP Path Traversal Vulnerability

Huawei Read is the built-in mobile reading software for Huawei phones. A path traversal vulnerability exists in the Huawei Reading App, which is due to the software failing to adequately verify the file storage path. An attacker exploits the vulnerability to save a downloaded malicious file to a...

Stored Cross-Site Scripting Vulnerability in Palm QC App

Palm Qingcheng app is a smartphone-based city travel information query software. A stored cross-site scripting vulnerability exists in the "Feedback" section of the app. An attacker can insert malicious js code into the page to obtain user cookies and other information, resulting in user hijackin...

Weak Password Vulnerability in Bohui Water's Palm Water Android APP

Baohui Water Palm Water Android APP is an application software for water supply and drainage enterprises to display data from remote monitoring equipment. It supports water supply pipeline network pressure monitoring, zonal metering, water quality online monitoring, liquid level monitoring, well...

Palm Edge AliCloud OSS credentials have information leakage vulnerabilities

Palm Edge APP is a mobile unit association dating activities software. There is an information leakage vulnerability in the Palm Edge AliCloud OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret, endpoint built into the...