331 matches found
PT-2020-21844
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is reported, which can cause a crash. The crash involves the ndpi netbios name interpret, ndpi int netbios add connection...
PT-2020-22353
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash involves the ndpi netbios name interpret, ndpi int netbios add...
PT-2020-22004
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the ndpi search kerberos function, and the call stack includes check ndpi udp flo...
PT-2020-21769
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is identified, associated with a crash type. The crash state involves several functions: ndpi strnstr, ndpi search nats...
PT-2020-22300
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: ndpi check dga name, ndpi search...
PT-2020-22628
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is reported, which can cause a crash. The crash involves functions such as ndpi parse packet line info, ndpi search mail...
PT-2020-22415
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read. Technical details about the crash include the functions ndpi add connection as bittorrent, ndpi int...
PT-2020-21890
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions search valid dns, ndpi search dns, and check ndpi udp flow func...
PT-2020-22535
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details include the crash type and state, which involve functions such as ndpi check...
PT-2020-21975
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 8 crash has been reported. The crash involves the functions ndpi search openvpn, check ndpi udp flow func, and ndpi detection...
CVE-2017-18612
The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...
Design/Logic Flaw
The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...
CVE-2017-18612: Improper Neutralization of Input During Web Page Generation
The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...
PT-2019-8543
Name of the Vulnerable Software and Affected Versions wp-whois-domain plugin version 1.0.0 Description The issue concerns a problem with the wp-whois-domain plugin for WordPress, where there is a potential for XSS via the domain parameter in the "pages/func-whois.php" endpoint. Recommendations Fo...
CVE-2016-10758
PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and pkinc/func/default.php via the imagename parameter...
PT-2019-7554
Name of the Vulnerable Software and Affected Versions PHPKIT version 1.6.6 Description The issue allows for arbitrary file upload. This can be demonstrated by uploading a .php file to specific API endpoints, such as "pkinc/admin/mediaarchive.php" and "pkinc/func/default.php", via the image name...
CVE-2016-10758: Unrestricted Upload of File with Dangerous Type
PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and pkinc/func/default.php via the imagename parameter...
PT-2019-18592
Name of the Vulnerable Software and Affected Versions SAMSUNG X7400GX SyncThru Web Service version V6.A6.25 V11.01.05.25 08-21-2015 Description A security issue exists in the SyncThru Web Service, where an XSS issue is present in the "/sws/swsAlert.sws" endpoint, affecting multiple parameters:...
CVE-2019-7418: Improper Neutralization of Input During Web Page Generation
XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc...
