6 matches found
CVE-2024-32985: Concurrent Execution using Shared Resource with Improper Synchronization
Stellar-core is a reference implementation for the peer-to-peer agent that manages the Stellar network. Prior to 20.4.0, core nodes could be randomly crashed due to a race condition with a 3rd party library. The likelihood of affecting the network is low since crashed nodes come back up online...
Pornhub: SSRF and local file disclosure by video upload on http://www.youporn.com/
The researcher was successful in exploiting a vulnerability in 3rd encoding party library resulting in the execution of SSRF attacks and Local File Disclosure...
Remote code execution
A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution. This is mitigated by the default .htaccess protection against PHP execution, and the fact that Composer development dependencies aren't normal installed. You might be vulnerabl...
Cross-Site Scripting in 3rd party library Flowplayer
More info at https://typo3.org/security/advisory/typo3-core-sa-2015-007...
dtSearch DUNZIP32.dll Buffer Overflow Vulnerability
Networksecurity.fi Security Advisory 21-12-2005 Title: dtSearch DUNZIP32.dll buffer overflow vulnerability Criticality: High 3/3 Affected software: dtSearch versions prior than 7.20 Build 7136 Author: Juha-Matti Laurio info at networksecurity.fi, juha-matti.laurio at netti.fi Date: 21th December,...