27 matches found
CVE-2023-24826 Usage of Uninitialized Timer during forwarding of Fragments with SFR
RIOT-OS, an operating system for Internet of Things IoT devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2023.04, an attacker can send crafted frames to the device to trigger the usage of an uninitialized object leading to denial of service. This issu...
CVE-2022-24826
Git LFS on Windows is affected by CVE-2022-24826 where, when a malicious repository contains a file with a base name "." and a file extension from PATHEXT and a conflicting executable name (e.g., git.exe, uname, cygpath.exe), Git LFS may cause an attacker-controlled binary in the current director...
CVE-2021-24826 Custom Content Shortcode < 4.0.2 - Authenticated Stored Cross-Site Scripting
The Custom Content Shortcode WordPress plugin before 4.0.2 does not escape custom fields before outputting them, which could allow Contributor+ v 4.0.1 or Admin+ v 4.0.2 users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed. Please note that such attack is still...
CVE-2021-24826
The CVE-2021-24826 issue affects the WordPress plugin “Custom Content Shortcode” prior to version 4.0.2. The vulnerability arises because the plugin does not escape custom fields before output, enabling authenticated users with Contributor+ (v < 4.0.1) or Admin+ (v
CVE-2020-24826
creationtimestamp| type| source ---|---|--- 2021-08-04 19:24:13+00:00| seen| https://t.me/cibsecurity/26802...
CVE-2020-24826
A vulnerability in the elf::section::asstrtab function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted ELF file...
CVE-2020-24826
Libelfin 0.3 has a denial-of-service vulnerability in elf::section::as_strtab that can be triggered by a crafted ELF file, causing segmentation fault. This is confirmed across multiple reports (e.g., Red Hat CVE page, Debian/NVD records). The available documents do not specify a patch version or ...