CVE-2020-10594

An issue was discovered in drf-jwt 1.15.x before 1.15.1. It allows attackers with access to a notionally invalidated token to obtain a new, working token via the refresh endpoint, because the blacklist protection mechanism is incompatible with the token-refresh feature. NOTE: drf-jwt is a fork of...

CVE-2019-10594

Stack overflow can occur when SDP is received with multiple payload types in the FMTP attribute of a video M line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ800...

CVE-2024-10594

creationtimestamp| type| source ---|---|--- 2024-10-31 22:47:53+00:00| seen| https://t.me/cvedetector/9542...

CVE-2024-10594 ESAFENET CDG FileDirectoryService.java docHistory sql injection

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function docHistory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument fileId leads to sql injection. It is possible to launch the attack...

CVE-2020-10594

CVE-2020-10594 affects drf-jwt 1.15.x before 1.15.1. The issue stems from an incompatibility between the blacklist protection mechanism and the token-refresh feature, allowing an attacker who has access to a notionally invalidated token to obtain a new, valid token via the refresh endpoint. The d...

CVE-2020-10594

An issue was discovered in drf-jwt 1.15.x before 1.15.1. It allows attackers with access to a notionally invalidated token to obtain a new, working token via the refresh endpoint, because the blacklist protection mechanism is incompatible with the token-refresh feature. NOTE: drf-jwt is a fork of...

CVE-2019-10594

CVE-2019-10594 is a stack overflow vulnerability in Snapdragon media SDP handling when FMTP in an M-line carries multiple payload types. Affected are Snapdragon Auto, Compute, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, Wearables across numerous SoC families (APQ, MDM, MSM variants)...

nodeway-ipip (>=0.0.1 <=1.0.2) potentially affected by CVE-2016-10594 via ipip (=3.0.0)

ipip NPM version =3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipip and may be impacted: - nodeway-ipip =0.0.1, =1.0.2 Source cves: CVE-2016-10594 Source advisory: OSV:GHSA-9GQH-Q4CX-F2H9...

Delta Electronics Delta Industrial Automation Buffer Overflow (CVE-2018-10594)

This module exploits a stack based buffer overflow in Delta Electronics Delta Industrial Automation COMMGR 1.08. The vulnerability exists when handling specially crafted packets. Successful exploitation of this vulnerability could result in the execution of arbitrary code...

Delta Electronics Delta Industrial Automation COMMGR 1.08 Buffer Overflow

Exploit Title: Delta Electronics Delta Industrial Automation COMMGR - Remote STACK-BASED BUFFER OVERFLOW Date: 02.07.2018 Exploit Author: t4rkd3vilz Vendor Homepage: http://www.deltaww.com/ Software Link:...

Delta Electronics Delta Industrial Automation COMMGR 1.08 Stack Buffer Overflow Exploit

This Metasploit module exploits a stack based buffer overflow in Delta Electronics Delta Industrial Automation COMMGR 1.08. The vulnerability exists in COMMGR.exe when handling specially crafted packets. This Metasploit module has been tested successfully on Delta Electronics Delta Industrial...

Delta Electronics Delta Industrial Automation COMMGR 1.08 - Stack Buffer Overflow (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Delta Electronics Delta Industrial Automation COMMGR 1.08 Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer...

CVE-2018-10594

creationtimestamp| type| source ---|---|--- 2018-10-08 15:13:57+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/deltaiacommgrbof.rb 2018-10-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45574 2021-09-21 06:42:54+00:00|...

Delta Electronics Delta Industrial Automation COMMGR 1.08 Stack Buffer Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Delta Electronics Delta Industrial Automation COMMGR 1.08 Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer...

Delta Electronics Delta Industrial Automation COMMGR 1.08 Stack Buffer Overflow

This module exploits a stack based buffer overflow in Delta Electronics Delta Industrial Automation COMMGR 1.08. The vulnerability exists in COMMGR.exe when handling specially crafted packets. This module has been tested successfully on Delta Electronics Delta Industrial Automation COMMGR 1.08 ov...

Delta Industrial Automation COMMGR 1.08 - Stack Buffer Overflow Exploit

Exploit for hardware platform in category dos / poc Exploit Title: Delta Electronics Delta Industrial Automation COMMGR - Remote STACK-BASED BUFFER OVERFLOW Exploit Author: t4rkd3vilz Vendor Homepage: http://www.deltaww.com/ Software Link:...

Delta Industrial Automation COMMGR 1.08 - Stack Buffer Overflow (PoC)

Delta Industrial Automation COMMGR 1.08 - Stack Buffer Overflow PoC Exploit Title: Delta Electronics Delta Industrial Automation COMMGR - Remote STACK-BASED BUFFER OVERFLOW Date: 02.07.2018 Exploit Author: t4rkd3vilz Vendor Homepage: http://www.deltaww.com/ Software Link:...

Delta Industrial Automation COMMGR 1.08 - Stack Buffer Overflow (PoC)

Exploit Title: Delta Electronics Delta Industrial Automation COMMGR - Remote STACK-BASED BUFFER OVERFLOW Date: 02.07.2018 Exploit Author: t4rkd3vilz Vendor Homepage: http://www.deltaww.com/ Software Link:...

CVE-2018-10594

Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM5x0, AHSIM5x1 utilize a fixed-length stack buffer where an unverified length value can be read from the network packets via a specific...

CVE-2018-10594

CVE-2018-10594 — Delta Electronics COMMGR stack buffer overflow family: Delta Industrial Automation COMMGR (v1.08 and earlier) with PLC simulators (DVPSimulator EH2/EH3/ES2/SE/SS2 and AHSIM_5x0/5x1). Root cause: a fixed-length stack buffer is written when an unverified length value read from a ne...