380 matches found
Integer overflow
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in consumecount of src/gnuv2/cplus-dem.c. The overflow check is valid logic but, is missing the modulus if the block once compiled. The compiler sees this block...
PT-2023-27217 · Rizin · Rizin
Name of the Vulnerable Software and Affected Versions: Rizin versions 0.6.0 and prior Description: The issue is related to an integer overflow in the consume count function of src/gnu v2/cplus-dem.c. This overflow occurs because the compiler considers a block of code as unreachable due to a prior...
WordPress Tawk.To Live Chat Plugin < 0.6.0 Broken Access Control Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tawk:tawk.tolivechat"; if description...
CVE-2023-27510
JB Inquiry form contains an exposure of private personal information to an unauthorized actor vulnerability, which may allow a remote unauthenticated attacker to obtain information entered from forms created using the affected product. The affected products and versions are as follows: JB Inquiry...
PT-2023-15083 · Unknown · Woocommerce
Name of the Vulnerable Software and Affected Versions: Amin A.Rezapour Product Specifications for Woocommerce plugin versions 0.6.0 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a...
WordPress plugin Product Specifications for Woocommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
Jubei JB inquiry form 安全漏洞
Jubei JB inquiry form is an inquiry intake form from Jubei Japan that can be installed on websites. A security vulnerability exists in Jubei JB inquiry form, which stems from the presence of information disclosure. Affected products and versions: JB Inquiry Form version 0.6.1, 0.6.0, 0.5.2, 0.5.1...
CVE-2023-25076
CVE-2023-25076 affects sniproxy: a buffer overflow in the handling of wildcard backend hosts can allow arbitrary code execution via crafted HTTP or TLS packets. Impact observed in SNIProxy 0.6.0-2 and the master branch. Exploitation details are not provided in the Initial description, but multipl...
PT-2023-19917 · Sniproxy +2 · Sniproxy +2
Name of the Vulnerable Software and Affected Versions: SNIProxy versions 0.6.0-2 through the master branch commit: 822bb80df9b7b345cc9eba55df74a07b498819ba Description: A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy. A specially crafted HTTP or TLS...
SNIProxy 安全漏洞
SNIProxy proxies incoming HTTP and TLS connections based on the hostname contained in the initial request of the TCP session. This allows HTTPS name-based virtual hosts to detach the back-end server without the need to install a private key on the proxy machine. A security vulnerability exists in...
CVE-2023-27475
Goutil is a collection of miscellaneous functionality for the go language. In versions prior to 0.6.0 when users use fsutil.Unzip to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. This vulnerability is known as a ZipSlip. This issue has been fixed in version...
Path traversal
Goutil is a collection of miscellaneous functionality for the go language. In versions prior to 0.6.0 when users use fsutil.Unzip to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. This vulnerability is known as a ZipSlip. This issue has been fixed in version...
CVE-2023-27475 Goutil vulnerable to path traversal when unzipping files
Goutil is a collection of miscellaneous functionality for the go language. In versions prior to 0.6.0 when users use fsutil.Unzip to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. This vulnerability is known as a ZipSlip. This issue has been fixed in version...
Goutil 路径遍历漏洞
Goutil is a library of some tool functions commonly used by Go. A path traversal vulnerability exists in versions of Goutil prior to 0.6.0, which stems from an improper restriction of pathnames to restricted directories in the software...
Buffer overflow
Buffer Overflow vulnerability in Dvidelabs flatcc v.0.6.0 allows local attacker to execute arbitrary code via the fltacc execution of the errorrefsym function...
FlatCC 安全漏洞
FlatCC is a compiler. A security vulnerability exists in FlatCC version v.0.6.0, which originated from a vulnerability that allows an attacker to execute arbitrary code by executing the errorrefsym function via fltacc...
SUSE CVE-2016-10539
negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. The header for "Accept-Language", when parsed by negotiator 0.6.0 and earlier is vulnerable to Regular Expression Denial of Service via a specially crafted string...
SUSE CVE-2021-45940
libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 4 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...
CVE-2019-25102
A vulnerability, which was classified as problematic, was found in simple-markdown 0.6.0. Affected is an unknown function of the file simple-markdown.js. The manipulation with the input :/:/:/:/:/:/:/:/:/:/ leads to inefficient regular expression complexity. It is possible to launch the attack...