366 matches found
CVE-2020-20486
IEC104 v1.0 contains a stack-buffer overflow in the parameter Iec10xStaAddr...
PT-2021-10500
Name of the Vulnerable Software and Affected Versions: IEC104 version 1.0 Description: The issue is a stack-buffer overflow in the Iec10x Sta Addr parameter. Recommendations: For IEC104 version 1.0, consider restricting access to the Iec10x Sta Addr parameter to minimize the risk of exploitation...
PT-2021-21247
Name of the Vulnerable Software and Affected Versions Care2x Hospital Information Management version 2.7 Alpha Description A stored cross-site scripting XSS issue has been identified. The vulnerability is found in POST requests to the "/modules/registration admission/patient register.php" page,...
PT-2021-30955
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37536 Crash type: Use-of-uninitialized-value Crash state: H5F addr decode len H5VL native token to addr H5VL native object open...
PT-2021-29511
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.12 Description A null dereference issue was discovered in the parse dev addr function of the ieee802154 module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2021-29433
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.45 Description The issue is related to a null dereference in the parse dev addr function in the ieee802154 module. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...
PT-2021-24772
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to the initialization of GFX10 ADDR CONFIG for VCN v3 in DPG mode. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-28766
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.9 through 5.12.3 Description The issue is related to the initialization of GFX10 ADDR CONFIG for VCN v3 in DPG mode. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
UBUNTU-CVE-2021-23133
A race condition in Linux kernel SCTP sockets net/sctp/socket.c before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctpdestroysock is called without socknetsk-sctp.addrwqlock then an element is removed from the...
PT-2024-11140
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been resolved in the Linux kernel, specifically in the spi-zynqmp-gqspi component. The issue occurs when handling op-addr, which uses the buffer "tmpbuf" after...
PT-2021-28014
Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash state indicates involvement of functions such as H5F addr decode len, H5F addr decode, and H5G ent decode. Recommendations At the...
PT-2020-20379
Name of the Vulnerable Software and Affected Versions Asylo versions up to 0.6.0 Description An arbitrary memory read issue allows an untrusted attacker to make a call to enc untrusted inet pton using an attacker-controlled klinux addr buffer parameter. The parameter size is unchecked, allowing t...
PT-2020-20376
Name of the Vulnerable Software and Affected Versions Asylo versions up to 0.6.0 Description An arbitrary memory overwrite issue allows an attacker to make a host call to FromkLinuxSockAddr with attacker-controlled content and size of klinux addr, enabling the attacker to write memory values from...
PT-2020-21659
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 8 crash has been reported. The crash involves the following functions: iotlb to region mips, get page addr code mips, and tb fi...
PT-2020-22431
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. Technical details include the involvement of specific functions: tvb get ipv4 addr with prefix...
PT-2020-22035
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. Technical details include the involvement of specific functions such as tvb get ipv4 addr with...
PT-2020-21917
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 4 crash has been reported. The crash involves the functions populate relocs record, rel cache new, and get import addr. No...
Windows/x86 - MSVCRT System + Add RDP Admin + Disable Firewall + Enable RDP Shellcode (644 Bytes)
644 bytes small Microsoft Windows x86 shellcode that disables the Windows firewall, adds the user MajinBuu with password TurnU2C@ndy!! to the system, adds the user MajinBuu to the local groups Administrators and Remote Desktop Users, and then enables the RDP Service. Exploit Title: Windows/x86 -...
Android 7 - 9 VideoPlayer - ihevcd_parse_pps Out-of-Bounds Write
Android 7 - 9 VideoPlayer - ihevcdparsepps Out-of-Bounds Write CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can...
PT-2019-13157
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions prior to 2.05B11 Description An issue was discovered in the firmware, where a command injection exists in the "apply.cgi" endpoint, specifically in the ip addr variable. This issue is exploitable with authenticatio...