CVE-2020-6018

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AESGCMDecryptContext::Decrypt when compiled using libsodium, leading to a Stack-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code execution...

CVE-2020-6018

CVE-2020-6018 affects Valve's Game Networking Sockets

CVE-2019-6018

Cross-site scripting vulnerability in NetCommons 3.2.2 and earlier NetCommons3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2019-6018

NetCommons3.x (NetCommons 3.2.2 and earlier) is affected by a cross-site scripting (XSS) vulnerability (CWE-79). The issue arises from insufficient validation of client data in the web application, allowing an attacker to inject arbitrary script/HTML into users’ browsers. Affected versions includ...

CVE-2018-14255

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-14255

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-6018

Fixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to extract private sensitive information by sniffing network traffic...

CVE-2018-6018

CVE-2018-6018 affects the Tinder iOS and Tinder Android apps. The underlying issue is described as fixed sizes of HTTPS responses, which enables an attacker to sniff network traffic and extract private, sensitive information. Connected sources corroborate a Match Group Tinder information disclosu...

CVE-2018-6018

Fixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to extract private sensitive information by sniffing network traffic...

CVE-2016-6018

CVE-2016-6018 affects IBM Emptoris Contract Management 10.0 and 10.1, where detailed error messages in certain features could allow an attacker to obtain additional information for further actions. The vulnerability is characterized as an information disclosure issue (information exposure) with a...

CVE-2017-6018

Summary : CVE-2017-6018 describes an open redirect in B. Braun Medical’s SpaceCom module, used with SpaceStation docking stations. Affected products/versions : SpaceCom module integrated in SpaceStation (part 8713142U) and SpaceStation with SpaceCom module (part 8713160U), both with software vers...

CVE-2015-6018

The CVE-2015-6018 issue affects ZyXEL PMG5318-B20A devices running firmware prior to 1.00(AANC.2)C0. The vulnerability arises from improper validation in the diagnostic ping function’s PingIPAddr parameter, allowing remote attackers to execute arbitrary commands as root (OS command injection). Do...

ZyXEL PMG5318-B20A OS Command Injection

Exploit Title: ZyXEL PMG5318-B20A OS Command Injection Vulnerability Discovered by: Karn Ganeshen CERT VU 870744 Vendor Homepage: www.zyxel.com Version Reported: Firmware version V100AANC0b5 CVE-2015-6018 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6018 Vulnerability Details CWE-20 :...

ZyXEL PMG5318-B20A - OS Command Injection Vulnerability

Exploit for hardware platform in category web applications Exploit Title: ZyXEL PMG5318-B20A OS Command Injection Vulnerability Discovered by: Karn Ganeshen CERT VU 870744 Vendor Homepage: www.zyxel.com Version Reported: Firmware version V100AANC0b5 CVE-2015-6018...

ZYXEL PMG5318-B20A - OS Command Injection

Exploit Title: ZyXEL PMG5318-B20A OS Command Injection Vulnerability Discovered by: Karn Ganeshen CERT VU 870744 Vendor Homepage: www.zyxel.com Version Reported: Firmware version V100AANC0b5 CVE-2015-6018 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6018 Vulnerability Details CWE-20 :...

ZYXEL PMG5318-B20A - OS Command Injection

ZYXEL PMG5318-B20A - OS Command Injection Exploit Title: ZyXEL PMG5318-B20A OS Command Injection Vulnerability Discovered by: Karn Ganeshen CERT VU 870744 Vendor Homepage: www.zyxel.com Version Reported: Firmware version V100AANC0b5 CVE-2015-6018...

CVE-2014-6018

The CVE-2014-6018 entry concerns the Android app “global beauty research” (com.appems.topgirl) v1.6, which does not verify X.509 certificates when connecting to SSL servers. This certificate validation bypass enables potential MITM attackers to spoof servers and access sensitive information via c...

HP OpenView OmniBack II Command Execution

No description provided by source. $Id: openviewomnibackexec.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...

CVE-2013-6018

CVE-2013-6018 describes a cross-site request forgery (CSRF) vulnerability in Tyler Technologies’ TaxWeb 3.13.3.1, specifically affecting the login.jsp page. The issue allows a remote attacker to hijack the authentication of arbitrary users by inducing them to perform a password-changing action, i...