91 matches found
CVE-2024-1112
CVE-2024-1112 is a heap-based buffer overflow in Resource Hacker (Angus Johnson) affecting version 3.6.0.92, allowing arbitrary code execution via a long filename argument. The vulnerability is documented across multiple connected sources, including a PoC exploit on GitHub that demonstrates using...
CVE-2024-1112 Buffer Overflow Vulnerability in Resource Hacker
Heap-based buffer overflow vulnerability in Resource Hacker, developed by Angus Johnson, affecting version 3.6.0.92. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument...
Oracle Linux 7 : php (ELSA-2020-1112)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1112 advisory. - fix underflow in envpathinfo in fpmmain.c CVE-2019-11043 - fix stack-buffer-overflow while parsing HTTP response CVE-2018-7584 - fix out-of-bounds re...
CVE-2023-1112
creationtimestamp| type| source ---|---|--- 2023-03-07 01:40:31+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3882 2023-08-02 10:59:58+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4839 2024-10-24 04:50:28+00:00| published-proof-of-concept| https://t.me/codeb0ss/98...
CVE-2023-1112
CVE-2023-1112 affects the WordPress plugin Drag and Drop Multiple File Upload for Contact Form 7 (version 5.0.6.1). The vulnerability is in an unknown function within admin-ajax.php where manipulating the parameter upload_name enables relative path traversal. Public exploitation is reported, with...
CVE-2023-1112 Drag and Drop Multiple File Upload Contact Form 7 admin-ajax.php path traversal
A vulnerability was found in Drag and Drop Multiple File Upload Contact Form 7 5.0.6.1 on WordPress. It has been classified as critical. Affected is an unknown function of the file admin-ajax.php. The manipulation of the argument uploadname leads to relative path traversal. It is possible to laun...
Splunk Enterprise 8.1 < 8.1.12, 8.2.0 < 8.2.9, 9.0.0 < 9.0.2 (SVD-2022-1112)
The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2022-1112 advisory. - In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, sending a malformed file through the Splunk- to-Splunk S2S or...
CVE-2022-1112
creationtimestamp| type| source ---|---|--- 2022-04-18 22:23:53+00:00| seen| https://t.me/cibsecurity/41065...
CVE-2022-1112
The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, and does not sanitise as well as escape them, which could allow attackers to perform Stored Cross-Site scripting against a logged in admin via a CSRF attack...
CVE-2022-1112
The CVE-2022-1112 entry concerns the WordPress Autolinks plugin (up to version 1.0.1) with a Stored Cross-Site Scripting flaw caused by missing CSRF protection and lack of sanitization/escaping when updating settings. The vulnerability could allow a logged-in administrator to be targeted via a CS...
RHEL 8 : openssl (RHSA-2022:1112)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1112 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
CVE-2021-1112
NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference may lead to complete denial of service...
CVE-2021-1112
CVE-2021-1112 concerns a vulnerability in NVIDIA Linux kernel distributions, specifically in the nvmap component, where a null pointer dereference can cause a complete denial of service. The connected documents confirm this as the root cause and reference the same description across multiple sour...
SUSE: Security Advisory (SUSE-SU-2014:1112-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1112
Technical details for CVE-2020-1112 are not publicly available in the provided documents. No confirmed affected products, root cause, or fixes are documented here. Monitor official CVE sources and vendor updates for concrete details.
CentOS 7 : php (RHSA-2020:1112)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1112 advisory. - An issue was discovered in ext/phar/pharobject.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is...
RHEL 7 : php (RHSA-2020:1112)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1112 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: Reflected XSS on PHAR 404 page...
openSUSE: Security Advisory for glusterfs (openSUSE-SU-2020:0079_1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for glusterfs (EulerOS-SA-2018-1185)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2017-1112)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...