1385 matches found
CVE-2023-45927
S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...
CVE-2023-45929
S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixuptgetstr...
CVE-2023-45929
S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixuptgetstr...
CVE-2023-45927
S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...
CVE-2023-45927
The S-Lang library (specifically version 2.3.2 ) is vulnerable to a Denial of Service (DoS) condition. The root cause is an arithmetic exception triggered via the tt_sprintf() function. Specifically, the vulnerability arises from an uncaught exception caused by parsing a corrupted terminfo file ,...
CVE-2023-45927
S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...
CVE-2023-45929
S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixuptgetstr...
CVE-2023-45927
S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...
CVE-2023-45929
S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixuptgetstr...
S-Lang 安全漏洞
S-Lang is an S-Lang open source software library for Unix, Windows, VMS, OS / 2 and Mac OS X. A security vulnerability exists in S-Lang version 2.3.2, which stems from the discovery of a containment segmentation error vulnerability via the function fixuptgetstr...
CVE-2023-45927: Improper Check or Handling of Exceptional Conditions
S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...
CVE-2023-45929: Buffer Copy without Checking Size of Input
S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixuptgetstr...
CVE-2023-45929
The S-Lang library (specifically libslang.so ) is vulnerable to a segmentation fault in the fixup_tgetstr() function. The root cause is the improper handling of a corrupted terminfo file , which can lead to a Denial of Service (DoS) . This issue affects S-Lang 2.3.2 and related versions like 2.3....
PT-2024-13311 · S-Lang +1 · S-Lang +1
Name of the Vulnerable Software and Affected Versions: S-Lang version 2.3.2 Description: A segmentation fault was discovered in S-Lang via the function fixup tgetstr. Recommendations: For S-Lang version 2.3.2, consider disabling the fixup tgetstr function as a temporary workaround until a patch i...
phpMyFAQ's File Upload Bypass at Category Image Leads to RCE
Summary The category image upload function in phpmyfaq is vulnerable to manipulation of the Content-type and lang parameters, allowing attackers to upload malicious files with a .php extension, potentially leading to remote code execution RCE on the system. Details In the file upload function of...
GHSA-PWH2-FPFR-X5GF phpMyFAQ's File Upload Bypass at Category Image Leads to RCE
Summary The category image upload function in phpmyfaq is vulnerable to manipulation of the Content-type and lang parameters, allowing attackers to upload malicious files with a .php extension, potentially leading to remote code execution RCE on the system. Details In the file upload function of...
CVE-2024-28105
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The category image upload function in phpmyfaq is vulnerable to manipulation of the Content-type and lang parameters, allowing attackers to upload malicious files with a .php extension,...
CVE-2024-28105 phpMyFAQ's File Upload Bypass at Category Image Leads to RCE
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The category image upload function in phpmyfaq is vulnerable to manipulation of the Content-type and lang parameters, allowing attackers to upload malicious files with a .php extension,...
CVE-2024-28105
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The category image upload function in phpmyfaq is vulnerable to manipulation of the Content-type and lang parameters, allowing attackers to upload malicious files with a .php extension,...
CVE-2024-28105 phpMyFAQ's File Upload Bypass at Category Image Leads to RCE
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The category image upload function in phpmyfaq is vulnerable to manipulation of the Content-type and lang parameters, allowing attackers to upload malicious files with a .php extension,...