PT-2020-22035

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. Technical details include the involvement of specific functions such as tvb get ipv4 addr with...

PT-2020-22431

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. Technical details include the involvement of specific functions: tvb get ipv4 addr with prefix...

PT-2020-21917

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 4 crash has been reported. The crash involves the functions populate relocs record, rel cache new, and get import addr. No...

Windows/x86 - MSVCRT System + Add RDP Admin + Disable Firewall + Enable RDP Shellcode (644 Bytes)

644 bytes small Microsoft Windows x86 shellcode that disables the Windows firewall, adds the user MajinBuu with password TurnU2C@ndy!! to the system, adds the user MajinBuu to the local groups Administrators and Remote Desktop Users, and then enables the RDP Service. Exploit Title: Windows/x86 -...

Android 7 - 9 VideoPlayer - ihevcd_parse_pps Out-of-Bounds Write

Android 7 - 9 VideoPlayer - ihevcdparsepps Out-of-Bounds Write CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can...

PT-2019-13157

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions prior to 2.05B11 Description An issue was discovered in the firmware, where a command injection exists in the "apply.cgi" endpoint, specifically in the ip addr variable. This issue is exploitable with authenticatio...

CVE-2019-11368

AU Optronics Solar Data Recorder prior to version 1.3.0 is affected by CVE-2019-11368: a stored XSS vulnerability in the web interface reachable via the protect/config.htm addr parameter. The issue permits script execution within the context of an authenticated user (stored in the application's b...

CVE-2019-11368

Stored XSS was discovered in AUO Solar Data Recorder before 1.3.0 via the protect/config.htm addr parameter...

CVE-2019-11368: Improper Neutralization of Input During Web Page Generation

Stored XSS was discovered in AUO Solar Data Recorder before 1.3.0 via the protect/config.htm addr parameter...

PT-2019-12261

Name of the Vulnerable Software and Affected Versions AUO Solar Data Recorder versions prior to 1.3.0 Description A Stored XSS issue was found in the software. The issue is related to the addr parameter in the "protect/config.htm" endpoint. Recommendations For versions prior to 1.3.0, update to...

PT-2019-12824

Name of the Vulnerable Software and Affected Versions Tiny C Compiler aka TinyCC or TCC version 0.9.27 Description An issue in Tiny C Compiler allows a one-byte out-of-bounds write in the gsym addr function due to mishandling of section switches by tccasm.c when compiling a crafted source file...

PT-2018-14234

Name of the Vulnerable Software and Affected Versions DASAN H660GW devices affected versions not specified Description The issue concerns the Port Forwarding functionality, which allows remote attackers to execute arbitrary code. This is achieved by using shell metacharacters in the Addr paramete...

PT-2018-1333

Name of the Vulnerable Software and Affected Versions D-Link DIR-629-B1 affected versions not specified Description The issue is caused by a buffer overflow in the weblogin log function. This can be exploited by a remote attacker using a specially crafted request to the session.cgi?ACTION=logout...

PT-2018-4011 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 version EU v. 1.01 Description: The issue concerns a buffer overflow in the diagnostics functionality of the affected device. This allows authenticated remote attackers to execute arbitrary code by sending a long Addr value to...

NIS bootparamd Domain Name Disclosure

This module discloses the NIS domain name from bootparamd. You must know a client address from the target's bootparams file. Hint: try hosts within the same network range as the target. This module requires Metasploit: https://metasploit.com/download Current source:...

PT-2017-13745

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description A buffer overrun issue occurs when processing the QCA NL80211...

PT-2017-13091

Name of the Vulnerable Software and Affected Versions TP-Link WR940N WiFi routers with hardware version 4 Description The issue concerns multiple stack-based buffer overflows that allow remote authenticated users to execute arbitrary code. This can be achieved via the ping addr parameter to...

ShopsN v2.0 official version of the front-end UserController.class.php file SQL injection vulnerability

ShopsN is a free e-commerce open source system. ShopsN v2.0 official version of the front-end UserController.class.php file SQL injection vulnerability . As the system fails to effectively filter the addrdel function. A remote attacker can exploit the vulnerability to obtain sensitive database...

openSUSE Security Update : the Linux Kernel (openSUSE-2017-734) (Stack Clash)

The openSUSE Leap 42.2 kernel was updated to 4.4.73 to receive security and bugfixes. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped'...

SQL Injection Vulnerability in addr_edite Method of ShopSn V2.0 Mall System

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. A SQL injection vulnerability exists in the userid parameter in the addredite method o...