78 matches found
CVE-2025-53398
CVE-2025-53398 affects Portrait Displays Dell Color Management application 3.3.8 for Dell monitors. The root cause is insecure permissions on a temporary folder created during a custom installation path, enabling a local, low-privilege attacker to achieve elevated system privileges. The exploit i...
CVE-2025-53398
The Portrait Dell Color Management application 3.3.8 for Dell monitors has Insecure Permissions,...
CVE-2025-53398
The Portrait Dell Color Management application 3.3.8 for Dell monitors has Insecure Permissions,...
EUVD-2017-12331
Malware in sbrugna...
EUVD-2022-43289
Malicious code in bioql PyPI...
CVE-2022-3956
A vulnerability classified as critical has been found in tsruban HHIMS 2.1. Affected is an unknown function of the component Patient Portrait Handler. The manipulation of the argument PID leads to sql injection. It is possible to launch the attack remotely. It is recommended to apply a patch to f...
Apple'S Synthetic Defocus Noise Pattern: Characterization and Forensic Applications
iPhone portrait-mode images contain a distinctive pattern in out-of-focus regions simulating the bokeh effect, which we term Apple's Synthetic Defocus Noise Pattern SDNP. If overlooked, this pattern can interfere with blind forensic analyses, especially PRNU-based camera source verification, as...
Malicious code in feature-preserve-portrait-editing (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 655ca5fa8c26583d141a0d6f86c0bca2e156cbad062d86ff11ec6827d2ac9cf7 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
Malicious code in portrait-mode-video (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a190c4d5edfd5b62c66980ec343cc41b020860de69839b9e8507217d00630bd8 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
Malicious code in x-portrait (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4f777ad032311636320b36bbc92cf2afaf1242290af10cbd15747c66836d8c13 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
MAL-2024-10822 Malicious code in feature-preserve-portrait-editing (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 655ca5fa8c26583d141a0d6f86c0bca2e156cbad062d86ff11ec6827d2ac9cf7 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
MAL-2024-10831 Malicious code in x-portrait (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4f777ad032311636320b36bbc92cf2afaf1242290af10cbd15747c66836d8c13 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
MAL-2024-10837 Malicious code in portrait-mode-video (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a190c4d5edfd5b62c66980ec343cc41b020860de69839b9e8507217d00630bd8 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
CVE-2024-31324
In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity in portrait mode first and then rotating it to landscape mode. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed...
CVE-2024-31324
In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity in portrait mode first and then rotating it to landscape mode. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed...
ASB-A-302431573
In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity in portrait mode first and then rotating it to landscape mode. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed...
Mouse pointer in Citrix session shifted
When using Citrix Published virtual apps on a setup with 3 monitors with a resolution of "2560x1440" each and one of them is in portrait mode, the mouse pointer is shifted in the app and it is not possible to use it correctly. The mouse pointer appears to be about 5cm next to where it is shown on...
plone.restapi vulnerable to Stored Cross Site Scripting with SVG image in user portrait
Impact There is a stored cross site scripting vulnerability for SVG images uploaded in user portraits. Note that a page that uses an image tag with an SVG image as source is never vulnerable, even when the SVG image contains malicious code. To exploit the vulnerability, an attacker would first ne...
GHSA-HC5C-R8M5-2GFH plone.restapi vulnerable to Stored Cross Site Scripting with SVG image in user portrait
Impact There is a stored cross site scripting vulnerability for SVG images uploaded in user portraits. Note that a page that uses an image tag with an SVG image as source is never vulnerable, even when the SVG image contains malicious code. To exploit the vulnerability, an attacker would first ne...
Sql injection
A vulnerability classified as critical has been found in tsruban HHIMS 2.1. Affected is an unknown function of the component Patient Portrait Handler. The manipulation of the argument PID leads to sql injection. It is possible to launch the attack remotely. It is recommended to apply a patch to f...