WordPress Plugin Responsive Thumbnail Slider - Arbitrary File Upload (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "WordPress Responsive Thumbnail Slider Arbitrary File Upload", 'Description' = %q This module exploits an arbitrary file upload vulnerability in...

WordPress Responsive Thumbnail Slider Plugin - Arbitrary File Upload Exploit

Exploit for php platform in category remote exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "WordPress Responsive Thumbnail Slider Arbitrary File Upload", 'Description' = %q This module...

Out-Of-Bounds Read

libtiff.so is vulnerable to out-of-bounds read. This is due to an illegal read in the cpStrips and cpTiles function in the thumbnail tool thumbnail.c, allowing an attacker to cause a denial of service condition...

Denial Of Service (DoS) Through Out-Of-Bounds Read

libtiff.so is vulnerable to out-of-bounds read. This is due to an illegal read via the src variable in the setrow function in the thumbnail tool thumbnail.c which allows an attacker to cause a denial of service condition...

Unpatched WordPress Flaw Gives Attackers Full Control Over Your Site

UPDATE— WordPress has released version 4.9.7 to finally patch this vulnerability that could allow remote attackers to gain full control over affected websites. You are recommended to install the latest available version of WordPress as soon as possible. Last week we received a tip about an...

DEBIAN-CVE-2017-2908

An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. A...

UBUNTU-CVE-2017-2908

An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. A...

CVE-2017-2908

An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. A...

CVE-2017-2908: Integer Overflow or Wraparound

An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. A...

PT-2018-3131

Name of the Vulnerable Software and Affected Versions Blender version 2.78c Description An integer overflow exists in the thumbnail functionality of the Blender open-source 3D creation suite. A specially crafted .blend file can cause an integer overflow, resulting in a buffer overflow, which can...

MediaWiki 1.18.0 Installation Path Disclosure Vulnerability - Linux

MediaWiki allows remote attackers to obtain the installation path via vectors related to thumbnail creation. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

MediaWiki 1.18.0 Installation Path Disclosure Vulnerability - Windows

MediaWiki allows remote attackers to obtain the installation path via vectors related to thumbnail creation. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Design/Logic Flaw

MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation...

UBUNTU-CVE-2014-1686

MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation...

CVE-2014-1686

MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation...

CVE-2014-1686

MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation...

CVE-2014-1686

Removed by vendor...

CVE-2014-1686

CVE-2014-1686 affects MediaWiki 1.18.0 and allows remote disclosure of the installation path via thumbnail creation vectors. Provided sources consistently describe path disclosure with CVSS v2/v3 base scores around 5.0–5.3 (MEDIUM). Some OpenVAS entries indicate a vendor patch is available, but n...

PT-2018-4175

Name of the Vulnerable Software and Affected Versions MediaWiki version 1.18.0 Description The issue allows remote attackers to obtain the installation path. This is related to thumbnail creation. Recommendations For MediaWiki version 1.18.0, at the moment, there is no information about a newer...

chromium-browser: leak of page thumbnails in new tab page

Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page...