CentOS 7 : evince (CESA-2017:2388)

An update for evince is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2016-7976

The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams...

Code injection

The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams...

CVE-2016-7976

CVE-2016-7976 concerns Ghostscript’s PS Interpreter. The initial document states that Ghostscript versions 9.18 and 9.20 are affected, and that a remote attacker can execute arbitrary code via crafted userparams. Connected sources reiterate the same CVE across multiple advisories and Nessus plugi...

CVE-2016-7976

The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams...

DEBIAN-CVE-2014-8127

LibTIFF 4.0.3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted TIFF image to the 1 checkInkNamesString function in tifdir.c in the thumbnail tool, 2 compresscontig function in tiff2bw.c in the tiff2bw tool, 3 putcontig8bitCIELab function in...

Command Injection

pidusage is vulnerable to command injections. Unsanitized input given to childprocess.exec resulting in command injection in the ps method. This is caused because the pid is never cast to an integer as it expects. Windows and Linux are not vulnerable but Darwin, SunOS, FreeBSD, and AIX are...

PRET - Printer Exploitation Toolkit

PRET is a new tool for printer security testing developed in the scope of a Master's Thesis at Ruhr University Bochum. It connects to a device via network or USB and exploits the features of a given printer language. Currently PostScript, PJL and PCL are supported which are spoken by most laser...

ps-print.de XSS vulnerability

Open Bug Bounty ID: OBB-230770 Description| Value ---|--- Affected Website:| ps-print.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

EulerOS 2.0 SP1 : mariadb (EulerOS-SA-2016-1035)

According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - MariaDB is a community developed branch of MySQL. MariaDB is a multi-user, multi-threaded SQL database server. It is a client/server...

skinlearning.at XSS vulnerability

Vulnerable URL: http://www.skinlearning.at/partner/grafik/PS468x60.swf?clickTag=javascript:alert%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12563238 VIP...

CVE-2014-9812

ImageMagick allows remote attackers to cause a denial of service NULL pointer dereference via a crafted ps file...

Null pointer dereference

ImageMagick allows remote attackers to cause a denial of service NULL pointer dereference via a crafted ps file...

CVE-2014-9812

ImageMagick allows remote attackers to cause a denial of service NULL pointer dereference via a crafted ps file...

CVE-2014-9812

ImageMagick allows remote attackers to cause a denial of service NULL pointer dereference via a crafted ps file...

CVE-2014-9812

ImageMagick is affected by CVE-2014-9812: remote attackers can trigger a denial of service (NULL pointer dereference) by supplying a crafted PS file. Connected sources confirm the vulnerability in ImageMagick’s PS handling; no patch/version details are provided in the supplied documents.

bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution

An arbitrary command injection flaw was found in the way bash processed the SHELLOPTS and PS4 environment variables. A local, authenticated attacker could use this flaw to exploit poorly written setuid programs to elevate their privileges under certain circumstances...

Denial Of Service (DoS) Through Null Pointer Dereference

ImageMagick is vulnerable to denial of service DoS attacks. These attacks are possible because there is a NULL pointer dereference in the ps file handling...

SA144 : OpenSSH Vulnerabilities January 2017

SUMMARY Blue Coat products using affected versions of OpenSSH are susceptible to several vulnerabilities. A remote attacker with access to an SSH server can exploit these vulnerabilities to execute arbitrary code on an SSH client. A local attacker can also exploit these vulnerabilities to obtain...

ps-scripts.com XSS vulnerability

Vulnerable URL: http://www.ps-scripts.com/archive/search.php?query=%22%3E%3C%2Ftitle%3E%27%3E%3B%3C%2Fscript%3E%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E=1=and=mark+yellow=20 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS...