1198 matches found
gtk3: gtk2: Library injection from CWD
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory...
gtk3 security update
3.22.30-12 - Stop loading modules from cwd CVE-2024-6655 - Resolves: RHEL-46988...
Moderate: Red Hat Security Advisory: buildah security update
An update for buildah is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
AFLplusplus: Arbitrary Code Execution
Background The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicornmode, and a lot more! Description In AFL++ 4.05c, the CmpLog component uses the current working directory to resolv...
SUSE CVE-2024-41817
ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The AppImage version ImageMagick might use an empty path when setting MAGICKCONFIGUREPATH and LDLIBRARYPATH environment variables while executing, which might lead to arbitrary code execution b...
Gtk3: gtk2: library injection from cwd
...
UBUNTU-CVE-2024-41817
ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The AppImage version ImageMagick might use an empty path when setting MAGICKCONFIGUREPATH and LDLIBRARYPATH environment variables while executing, which might lead to arbitrary code execution b...
CVE-2024-6655
CVE-2024-6655 affects GTK+ libraries (gtk2 and gtk3) across multiple Linux distributions. The flaw allows library injection into a GTK application from the current working directory under certain conditions, enabling local attack with high impact on confidentiality, integrity, and availability. M...
CVE-2024-6655: Improper Control of Generation of Code
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory...
SUSE CVE-2024-6655
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory...
Malicious code in cash-app-money-generator-new-working-2023-vajkiuea-kla (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in cash-app-money-generator-new-working-2023-lkapoiaw-uno (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in cash-app-money-generator-new-working-2023-ejualkiw-tul (npm)
--- -= Per source details. Do not edit below this line.=-...
Absolute Secure Access Security Vulnerability
Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.06. An attacker exploited the vulnerability resulting in a significant...
Absolute Secure Access Security Vulnerability
Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.06. An attacker exploited the vulnerability resulting in a significant...
Enhanced SSO Feature does not work. Applications fail to launch on Windows 11 devices.
After setting up Enhanced SSO according to https://docs.citrix.com/en-us/citrix-workspace-app-for-windows/domain-passthrough-for-single-sign-on , it doesn't work. When trying to launch an application, nothing happens. When using traditional SSO using the old SSONVR.exe mechanism, there is no issu...
Exploit for SQL Injection in Valvepress Automatic
Badges !MIT Licensehttps://img.shields.io/badge/Licens...
CVE-2023-5751
A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere...
RHEL 6 : lftp (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - lftp: particular remote file names may lead to current working directory erased CVE-2018-10916 Note that Nessus has...
