1185 matches found
CVE-2024-53863 Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders
Synapse is an open-source Matrix homeserver. In Synapse versions before 1.120.1, enabling the dynamicthumbnails option or processing a specially crafted request could trigger the decoding and thumbnail generation of uncommon image formats, potentially invoking external tools like Ghostscript for...
Element Synapse 安全漏洞
Element Synapse is an open source Matrix Home Server implementation from Element Open Source. A security vulnerability exists in Element Synapse versions prior to 1.106 that stems from allowing an unauthenticated remote participant to trigger a remote media download and cache it to a local media...
Element Synapse 安全漏洞
Element Synapse is an open source Matrix Home Server implementation from Element Open Source. A security vulnerability exists in Element Synapse that stems from the fact that multi-part/form data requests may, under certain configurations, temporarily increase memory consumption beyond expected...
Element Synapse 安全漏洞
Element Synapse is an open source Matrix Home Server implementation from Element Open Source. A security vulnerability exists in Element Synapse that stems from the inability to properly validate invitations received via federation...
PT-2024-35463
Name of the Vulnerable Software and Affected Versions Synapse versions prior to 1.120.1 Description Synapse is an open-source Matrix homeserver. The issue arises from the failure to properly validate invites received over federation, allowing a malicious server to send a specially crafted invite...
CVE-2024-29404
An issue in Razer Synapse 3 v.3.9.131.20813 and Synapse 3 App v.20240213 allows a local attacker to execute arbitrary code via the export parameter of the Chroma Effects function in the Profiles component...
CVE-2024-29404
Summary: A local code execution flaw exists in Razer Synapse 3 v3.9.131.20813 and Synapse 3 App v20240213 . The vulnerability is in the Profiles component, where the export parameter of the Chroma Effects function can be abused by a local attacker to run arbitrary code. Impact/score: CVSSv3.1 bas...
Razer Synapse 3 安全漏洞
Razer Synapse 3 is a software application from the American company Razer, Inc. cloud-based unified hardware configuration tool. A security vulnerability exists in Razer Synapse 3 version v.3.9.131.20813 and Synapse 3 App v.20240213, which originated from a vulnerability that allows a local...
Element Synapse 安全漏洞
Element Synapse is an open source Matrix Home Server implementation from Element Open Source. A security vulnerability exists in Element Synapse that stems from the Sliding Sync feature that may leak some room state changes to users who are no longer in the room...
Element Synapse 安全漏洞
Element Synapse is an open source Matrix Home Server implementation from Element Open Source. A security vulnerability exists in Element Synapse, which stems from the fact that enabling the dynamicthumbnails option or processing ad-hoc requests may trigger decoding and thumbnail generation for...
PT-2024-35961
Name of the Vulnerable Software and Affected Versions: Synapse versions prior to 1.120.1 Description: Synapse is an open-source Matrix homeserver. Enabling the dynamic thumbnails option or processing a specially crafted request could trigger the decoding and thumbnail generation of uncommon image...
PT-2024-27461 · Matrix · Synapse
Name of the Vulnerable Software and Affected Versions: Synapse versions prior to 1.106 Description: Synapse, an open-source Matrix homeserver, allows unauthenticated remote participants to trigger a download and caching of remote media from a remote homeserver to the local media repository. This...
Element Synapse 安全漏洞
Element Synapse is an open source Matrix home server implementation from Element Open Source. A security vulnerability exists in Element Synapse versions prior to 1.106, which stems from vulnerability to a disk stuffing attack, where an unauthenticated attacker can trick Synapse into downloading...
py-matrix-synapse -- multiple vulnerabilities in versions prior to 1.120.1
element-hq/synapse developers report: The 1.120.1 release fixes multiple security vulnerabilities, some affecting all prior versions of Synapse. Server administrators are encouraged to update Synapse as soon as possible. We are not aware of these vulnerabilities being exploited in the wild...
CVE-2024-29404
An issue in Razer Synapse 3 v.3.9.131.20813 and Synapse 3 App v.20240213 allows a local attacker to execute arbitrary code via the export parameter of the Chroma Effects function in the Profiles component...
June 11, 2024—KB5039236 (OS Build 25398.950)
None None...
MAL-2024-6058 Malicious code in synapse-x (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in synapse-x (PyPI)
--- -= Per source details. Do not edit below this line.=-...