1231 matches found
CVE-2025-9001
A vulnerability was determined in LemonOS up to nightly-2024-07-12 on LemonOS. Affected by this issue is the function HTTPGet of the file /Applications/Steal/main.cpp of the component HTTP Client. The manipulation of the argument chunkSize leads to stack-based buffer overflow. The attack may be...
CVE-2025-9001
A vulnerability was determined in LemonOS up to nightly-2024-07-12 on LemonOS. Affected by this issue is the function HTTPGet of the file /Applications/Steal/main.cpp of the component HTTP Client. The manipulation of the argument chunkSize leads to stack-based buffer overflow. The attack may be...
CVE-2025-9001 LemonOS HTTP Client main.cpp HTTPGet stack-based overflow
A vulnerability was determined in LemonOS up to nightly-2024-07-12 on LemonOS. Affected by this issue is the function HTTPGet of the file /Applications/Steal/main.cpp of the component HTTP Client. The manipulation of the argument chunkSize leads to stack-based buffer overflow. The attack may be...
PT-2025-33432 · Lemon S · Lemonos
Name of the Vulnerable Software and Affected Versions: LemonOS versions prior to nightly-2024-07-13 Description: A stack-based buffer overflow issue exists in the HTTP Client component of LemonOS. The HTTPGet function within the /Applications/Steal/main.cpp file is affected, specifically due to...
The vulnerability in the web client of IBM Datacap Navigator software, which is used for collecting and processing documents with IBM Datacap, allows a perpetrator to carry out a clickjacking attack.
The vulnerability in the IBM Datacap Navigator software, a document collection and processing tool, relates to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to carry out a clickjacking attack remotely...
The vulnerability in the web client of IBM Datacap Navigator software, which is used for collecting and processing documents with IBM Datacap, allows a perpetrator to compromise the confidentiality of the protected information.
The vulnerability of the IBM Datacap Navigator web client software for document collection and processing lies in the absence of a “Secure” flag in the session cookies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...
The vulnerability in the web client of IBM Datacap Navigator software, which is used for collecting and processing documents with IBM Datacap, allows a perpetrator to carry out a clickjacking attack.
The vulnerability in the IBM Datacap Navigator software, a document collection and processing tool, relates to the user interface’s false representation of critical information. Exploiting this vulnerability could allow an attacker to carry out a clickjacking attack remotely...
Malicious code in epc-node-web-client (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6926 Malicious code in epc-node-web-client (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in call-center-web-client (npm)
The package call-center-web-client was found to contain malicious code...
Malicious code in zorya-web-client (npm)
The package zorya-web-client was found to contain malicious code...
MAL-2025-41064 Malicious code in zorya-web-client (npm)
The package zorya-web-client was found to contain malicious code...
MAL-2025-16453 Malicious code in call-center-web-client (npm)
The package call-center-web-client was found to contain malicious code...
CVE-2025-42975
SAP NetWeaver Application Server ABAP BIC Document allows an unauthenticated attacker to craft a URL link which, when accessed on the BIC Document application, embeds a malicious script. When a victim clicks on this link, the script executes in the victim's browser, allowing the attacker to acces...
CVE-2025-42975 Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (BIC Document)
SAP NetWeaver Application Server ABAP BIC Document allows an unauthenticated attacker to craft a URL link which, when accessed on the BIC Document application, embeds a malicious script. When a victim clicks on this link, the script executes in the victim's browser, allowing the attacker to acces...
CVE-2025-42975: Improper Neutralization of Input During Web Page Generation
SAP NetWeaver Application Server ABAP BIC Document allows an unauthenticated attacker to craft a URL link which, when accessed on the BIC Document application, embeds a malicious script. When a victim clicks on this link, the script executes in the victim's browser, allowing the attacker to acces...
BIT-LIBPYTHON-2020-26116
http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request...
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.28+6 July 2025 CPU: Security fixes: CVE-2025-30749: several scenarios can lead to heap corruption bsc1246595 CVE-2025-30754: incomplete handshake may lead to weakening TLS protections bsc1246598...
CVE-2025-22227 CVE-2025-22227: Authentication Leak On Redirect With Reactor Netty HTTP Client
In some specific scenarios with chained redirects, Reactor Netty HTTP client leaks credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects...
