23 matches found
CVE-2026-108768
A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of the component Streaming Tool-Call Argument Handler. The manipulation leads to allocation of resources. It is possible to initiate the attack remotely. The exploit is publicly...
CVE-2026-108768 zhayujie CowAgent Streaming Tool-Call Argument json.loads allocation of resources
A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of the component Streaming Tool-Call Argument Handler. The manipulation leads to allocation of resources. It is possible to initiate the attack remotely. The exploit is publicly...
CVE-2026-108768
A vulnerability exists in zhayujie CowAgent up to version 2.2.0 within the Streaming Tool-Call Argument Handler component. The issue stems from the json.loads function, where specific manipulation leads to an allocation of resources (CWE-770, CWE-400). This flaw can be triggered via a remote atta...
EUVD-2026-97122
A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of the component Streaming Tool-Call Argument Handler. The manipulation leads to allocation of resources. It is possible to initiate the attack remotely. The exploit is publicly...
CVE-2026-108768: Allocation of Resources Without Limits or Throttling
A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of the component Streaming Tool-Call Argument Handler. The manipulation leads to allocation of resources. It is possible to initiate the attack remotely. The exploit is publicly...
PT-2026-110343
Name of the Vulnerable Software and Affected Versions zhayujie CowAgent versions prior to 2.2.1 Description An issue exists in the Streaming Tool-Call Argument Handler component where the json.loads function can be manipulated. This allows a remote attacker to cause an excessive allocation of...
EUVD-2017-11161
Malware in sbrugna...
CVE-2017-20156
A vulnerability was found in Exciting Printer and classified as critical. This issue affects some unknown processing of the file lib/printer/jobs/preparepage.rb of the component Argument Handler. The manipulation of the argument URL leads to command injection. The patch is named...
Differences Remote Desktop Manager Command-Line Argument Handler Credential Extraction
The vulnerability of the Command-Line Argument Handler component in software for controlling remote connections in Devolutions Remote Desktop Manager is related to the disclosure of information through registration files. Exploiting this vulnerability can allow a hacker to obtain encrypted user...
CVE-2024-2009
A vulnerability was found in Nway Pro 9. It has been rated as problematic. Affected by this issue is the function ajaxloginsubmitform of the file login\index.php of the component Argument Handler. The manipulation of the argument rsargs leads to information exposure through error message. The...
CVE-2024-2009
A vulnerability was found in Nway Pro 9. It has been rated as problematic. Affected by this issue is the function ajaxloginsubmitform of the file login\index.php of the component Argument Handler. The manipulation of the argument rsargs leads to information exposure through error message. The...
CVE-2024-2009 Nway Pro Argument index.php ajax_login_submit_form information exposure
A vulnerability was found in Nway Pro 9. It has been rated as problematic. Affected by this issue is the function ajaxloginsubmitform of the file login\index.php of the component Argument Handler. The manipulation of the argument rsargs leads to information exposure through error message. The...
CVE-2024-2009 Nway Pro Argument index.php ajax_login_submit_form information exposure
A vulnerability was found in Nway Pro 9. It has been rated as problematic. Affected by this issue is the function ajaxloginsubmitform of the file login\index.php of the component Argument Handler. The manipulation of the argument rsargs leads to information exposure through error message. The...
PT-2024-18576 · Nway Pro · Nway Pro
Name of the Vulnerable Software and Affected Versions: Nway Pro version 9 Description: A vulnerability was found in the function ajax login submit form of the file loginindex.php of the component Argument Handler. The manipulation of the argument rsargs leads to information exposure through error...
CVE-2024-2009: Generation of Error Message Containing Sensitive Information
A vulnerability was found in Nway Pro 9. It has been rated as problematic. Affected by this issue is the function ajaxloginsubmitform of the file login\index.php of the component Argument Handler. The manipulation of the argument rsargs leads to information exposure through error message. The...
CVE-2010-10005
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: It is a duplicate of CVE-2010-2799...
CVE-2017-20156
A vulnerability was found in Exciting Printer and classified as critical. This issue affects some unknown processing of the file lib/printer/jobs/preparepage.rb of the component Argument Handler. The manipulation of the argument URL leads to command injection. The patch is named...
Command injection
A vulnerability was found in Exciting Printer and classified as critical. This issue affects some unknown processing of the file lib/printer/jobs/preparepage.rb of the component Argument Handler. The manipulation of the argument URL leads to command injection. The patch is named...
CVE-2017-20156
A vulnerability was found in Exciting Printer and classified as critical. This issue affects some unknown processing of the file lib/printer/jobs/preparepage.rb of the component Argument Handler. The manipulation of the argument URL leads to command injection. The patch is named...
CVE-2017-20156 Exciting Printer Argument prepare_page.rb command injection
A vulnerability was found in Exciting Printer and classified as critical. This issue affects some unknown processing of the file lib/printer/jobs/preparepage.rb of the component Argument Handler. The manipulation of the argument URL leads to command injection. The patch is named...