PT-2023-24436 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.17.2 Description: A use-after-free issue exists due to improper data tracing. This can be triggered by calling the function nni mqtt msg get publish property in the file mqtt msg.c, potentially allowing an attacker to cause a...

PT-2023-24440 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.17.2 Description: A heap buffer overflow issue exists, which can be triggered by calling the function copyn str in the file mqtt parser.c. This can lead to a denial of service attack. Recommendations: For NanoMQ version 0.17....

NanoMQ 缓冲区错误漏洞

NanoMQ is an open source, lightweight and fast MQTT Broker for IoT edge platforms from EMQ Technologies. A security vulnerability exists in NanoMQ version 0.17.2, which originates from a heap buffer overflow that can be triggered by calling the function nnimsggetpubpid in the file message.c. The...

NanoMQ 资源管理错误漏洞

NanoMQ is a lightweight and fast MQTT Broker for IoT edge platforms open-sourced by EMQ Technologies, USA. A security vulnerability exists in NanoMQ version 0.17.2, which stems from improper data tracking and can trigger memory reuse after release by calling the function...

CVE-2023-33659

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nmqsubinfodecode in the file mqttparser.c. An attacker could exploit this vulnerability to cause a denial of service attack...

CVE-2023-33659

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nmqsubinfodecode in the file mqttparser.c. An attacker could exploit this vulnerability to cause a denial of service attack...

CVE-2023-33656

A memory leak vulnerability exists in NanoMQ 0.17.2. The vulnerability is located in the file message.c. An attacker could exploit this vulnerability to cause a denial of service attack by causing the program to consume all available memory resources...

EMQ Technologies NanoMQ 安全漏洞

EMQ Technologies NanoMQ is an ultra-lightweight, fast MQTT agent for the IoT edge from EMQ Technologies, USA. A security vulnerability exists in EMQ Technologies NanoMQ version 0.17.2, which stems from the presence of a memory leakage vulnerability that can be exploited by an attacker to cause th...

CVE-2023-33656

CVE-2023-33656 describes a memory leak in NanoMQ 0.17.2, located in the file message.c. The issue can allow a local attacker to cause a denial-of-service by consuming all available memory resources. Exploitation details, affected versions beyond 0.17.2, and concrete remediation steps are not prov...

Open redirect

A vulnerability was found in Artesãos SEOTools up to 0.17.1 and classified as critical. This issue affects the function eachValue of the file TwitterCards.php. The manipulation of the argument value leads to open redirect. Upgrading to version 0.17.2 is able to address this issue. The identifier ...

Open redirect

A vulnerability, which was classified as problematic, was found in Artesãos SEOTools up to 0.17.1. This affects the function makeTag of the file OpenGraph.php. The manipulation of the argument value leads to open redirect. Upgrading to version 0.17.2 is able to address this issue. The patch is...

CVE-2020-36663 Artesãos SEOTools OpenGraph.php makeTag redirect

A vulnerability, which was classified as problematic, was found in Artesãos SEOTools up to 0.17.1. This affects the function makeTag of the file OpenGraph.php. The manipulation of the argument value leads to open redirect. Upgrading to version 0.17.2 is able to address this issue. The patch is...

PT-2023-11830 · Unknown · Artesãos Seotools

Name of the Vulnerable Software and Affected Versions: Artesãos SEOTools versions up to 0.17.1 Description: A problematic issue was found in Artesãos SEOTools, affecting the makeTag function of the file OpenGraph.php. The manipulation of the value argument leads to open redirect. Recommendations:...

PT-2023-11831 · Unknown · Artesãos Seotools

Name of the Vulnerable Software and Affected Versions: Artesãos SEOTools versions up to 0.17.1 Description: A vulnerability has been found in the function setTitle of the file SEOMeta.php. The manipulation of the argument title leads to open redirect. Recommendations: For Artesãos SEOTools versio...

PT-2023-11832 · Unknown · Artesãos Seotools

Name of the Vulnerable Software and Affected Versions: Artesãos SEOTools versions up to 0.17.1 Description: A critical issue affects the eachValue function of the TwitterCards.php file. The manipulation of the value argument leads to an open redirect. Recommendations: For Artesãos SEOTools versio...

Fat Free CRM vulnerable to Cross-site Scripting

FatFreeCRM version =0.15.0 =0.16.0 =0.17.0 =0.17.2, and ==0.18.0 contains a Cross Site Scripting XSS vulnerability in commit 6d60bc8ed010c4eda05d6645c64849f415f68d65 that can result in Javascript execution. This attack appears to be exploitable via Content with Javascript payload will be executed...

CVE-2018-1000842

FatFreeCRM version =0.15.0 =0.16.0 =0.17.0 =0.17.2, ==0.18.0 contains a Cross Site Scripting XSS vulnerability in commit 6d60bc8ed010c4eda05d6645c64849f415f68d65 that can result in Javascript execution. This attack appear to be exploitable via Content with Javascript payload will be executed on e...

screen-resolution-extra security bypass vulnerability

screen-resolution-extra is a screen resolution extension used in GNOME Desktop. A security vulnerability exists in screen-resolution-mechanism in screen-resolution-extra version 0.17.2, which stems from the program's failure to properly use the PolicyKit D-Bus API.A local attacker can exploit thi...

CVE-2002-1110

Multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without magicquotesgpc enabled, allows remote attackers to gain privileges or perform unauthorized database operations via modified form fields, e.g. to accountupdate.php...

[Mantis Advisory/2002-01] SQL poisoning vulnerability in Mantis

Mantis Advisory/2002-01 SQL poisoning vulnerability in Mantis 0. Table of Contents 1. Introduction 2. Summary / Impact analysis 3. Affected versions 4. Workaround / Solution 5. Detailed explanation 6. Contact details 1. Introduction Mantis is an Open Source web-based bugtracking system, written i...