Information leakage vulnerability in the "personal data" section of the Palm Parent App

Palm Good Parent App is an educational software for parents. An information leakage vulnerability exists in the "Personal Information" section of Palm Parent App. Attackers can obtain information about other users by tampering with packets...

palm-stiftung.de XSS vulnerability

Open Bug Bounty ID: OBB-680141 Description| Value ---|--- Affected Website:| palm-stiftung.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

graphicsmagick/coder_PALM_fuzzer: Use-of-uninitialized-value in TransparentImageCallBack

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5134611630784512 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPALMfuzzer Fuzz target binary: coderPALMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

A week in security (February 5 – February 11)

Last week on Malwarebytes Labs, we featured a new Flash Player zero-day that has been found in recent targeted attacks. And we talked about a new trick to cripple browsers that came out of the hat of tech support scammers. We also covered several methods of stealing cryptocurrencies, including on...

e-services.co.palm-beach.fl.us XSS vulnerability

Open Bug Bounty ID: OBB-483714 Description| Value ---|--- Affected Website:| e-services.co.palm-beach.fl.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mylocal.palmbeachpost.com XSS vulnerability

Open Bug Bounty ID: OBB-466833 Description| Value ---|--- Affected Website:| mylocal.palmbeachpost.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

DEBIAN-CVE-2017-17783

In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8...

CVE-2017-17783

In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8...

UBUNTU-CVE-2017-17783

In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8...

Huawei Palm Reader APP Path Traversal Vulnerability

Huawei Read is the built-in mobile reading software for Huawei phones. A path traversal vulnerability exists in the Huawei Reading App, which is due to the software failing to adequately verify the file storage path. An attacker exploits the vulnerability to save a downloaded malicious file to a...

Stored Cross-Site Scripting Vulnerability in Palm QC App

Palm Qingcheng app is a smartphone-based city travel information query software. A stored cross-site scripting vulnerability exists in the "Feedback" section of the app. An attacker can insert malicious js code into the page to obtain user cookies and other information, resulting in user hijackin...

Weak Password Vulnerability in Bohui Water's Palm Water Android APP

Baohui Water Palm Water Android APP is an application software for water supply and drainage enterprises to display data from remote monitoring equipment. It supports water supply pipeline network pressure monitoring, zonal metering, water quality online monitoring, liquid level monitoring, well...

Palm Edge AliCloud OSS credentials have information leakage vulnerabilities

Palm Edge APP is a mobile unit association dating activities software. There is an information leakage vulnerability in the Palm Edge AliCloud OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret, endpoint built into the...

Memory Leak

ImageMagick is vulnerable to denial of service DoS attacks through a memory leak. A malicious user can cause a memory leak by passing a palm file to WritePALMImage in coders/palm.c...

ImageMagick memory leak vulnerability (CNVD-2017-21011)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'WritePALMImage' function in the coders/palm.c file in ImageMagick version...

DEBIAN-CVE-2017-12664

ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c...

UBUNTU-CVE-2017-12664

ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c...

ImageMagick Denial of Service Vulnerability (CNVD-2017-18114)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'WritePALMImage' function in the coders/palm.c file in ImageMagick...

DEBIAN-CVE-2017-11537

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception FPE in the WritePALMImage function in coders/palm.c, related to an incorrect bits-per-pixel calculation...

UBUNTU-CVE-2017-11537

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception FPE in the WritePALMImage function in coders/palm.c, related to an incorrect bits-per-pixel calculation...