CVE-2024-34416 WordPress Pk Favicon Manager plugin <= 2.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Pk Favicon Manager.This issue affects Pk Favicon Manager: from n/a through 2.1...

CVE-2024-34416

CVE-2024-34416 is an Unrestricted Upload of File with Dangerous Type vulnerability in the Pk Favicon Manager WordPress plugin (up to version 2.1). The issue enables uploading of dangerous files via the plugin, which, per the CVSS-derived metrics, could impact confidentiality, integrity, and avail...

WordPress Pk Favicon Manager plugin <= 2.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Roby Firnando Yusuf in WordPress Plugin Pk Favicon Manager versions = 2.1...

pk-cakovec.hr Improper Access Control vulnerability OBB-3835463

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

reading.pklibrary.com Cross Site Scripting vulnerability OBB-3821046

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pk-studios.com Improper Access Control vulnerability OBB-3807097

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pk-sportlab.com Cross Site Scripting vulnerability OBB-3433554

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pk-research.com Cross Site Scripting vulnerability OBB-3332883

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2009-0847

The asn1bufimbed function in the ASN.1 decoder in MIT Kerberos 5 aka krb5 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service application crash via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmeti...

SUSE CVE-2010-2640

Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer...

SUSE CVE-2012-4510

cups-pk-helper before 0.2.3 does not properly wrap the 1 cupsGetFile and 2 cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources...

The vulnerability of the cups-pk-helper-mechanism utility in the “EMIAS” operating system allows a perpetrator to cause a service failure or other effects due to insufficient memory.

The vulnerability of the cups-pk-helper-mechanism utility in the “EMIAS” operating system is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause service failures or other effects due to insufficient memory resources...

MAL-2022-5855 Malicious code in rsead-pk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d6b726115211be58c600213389047f180880b640b0f964d406bdad26da7b9f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rsead-pk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d6b726115211be58c600213389047f180880b640b0f964d406bdad26da7b9f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-4832

Name of the Vulnerable Software and Affected Versions cups-pk-helper-mechanism affected versions not specified Description The issue is related to memory deallocation errors in the cups-pk-helper-mechanism utility of the "ЕМИАС" operating system. Exploitation of this issue may allow an attacker t...

pk-ess.com Cross Site Scripting vulnerability OBB-2758216

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

new packages: cups-pk-helper

An update is available for cups-pk-helper. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

PT-2021-4263

Name of the Vulnerable Software and Affected Versions Matrix libolm versions prior to 3.2.3 Description The issue is related to a stack-based buffer overflow in the olm pk decrypt function, which can be triggered by a malicious Matrix homeserver. This could potentially allow remote code execution...

OSV-2021-494 Heap-buffer-overflow in AK::ByteBuffer::overwrite

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31698 Crash type: Heap-buffer-overflow READ 1 Crash state: AK::ByteBuffer::overwrite Crypto::PK::RSA::parsersakey FuzzRSAKeyParsing.cpp...

OSV-2021-394 Heap-buffer-overflow in Crypto::der_decode_sequence

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30906 Crash type: Heap-buffer-overflow READ 1 Crash state: Crypto::derdecodesequence Crypto::PK::RSA::parsersakey FuzzRSAKeyParsing.cpp...