Lucene search
+L

323 matches found

ATTACKERKB
ATTACKERKB
added 2021/12/19 9:15 a.m.5 views

CVE-2021-43083

Apache PLC4X - PLC4C Only the C language implementation was effected was vulnerable to an unsigned integer underflow flaw inside the tcp transport. Users should update to 0.9.1, which addresses this issue. However, in order to exploit this vulnerability, a user would have to actively connect to a...

8.8CVSS7.3AI score0.01921EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/12/19 12:0 a.m.7 views

Apache PLC4X - PLC4C 数字错误漏洞

Apache PLC4X - PLC4C is a generic adapter for industrial communication protocols from the Apache Foundation, U.S.A. A security vulnerability exists in Apache PLC4X - PLC4C only the C language version is affected versions prior to 0.9.1. No detailed vulnerability details are available at this time...

8.8CVSS5.5AI score0.01921EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.8 views

The vulnerability of the call() function in the src/parser.c component of the control flow analyzer for C source files, related to the use of memory after its release, allows a attacker to trigger a service failure.

The vulnerability of the call function in the src/parser.c component of the control flow analyzer for C source files is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.8AI score0.0042EPSS
SaveExploits1References5Affected Software2
Kitploit
Kitploit
added 2021/07/18 12:30 p.m.80 views

DNSStager - Hide Your Payload In DNS

DNSStager is an open-source project based on Python used to hide and transfer your payload using DNS. DNSStager will create a malicious DNS server that handles DNS requests to your domain and return your payload as a response to specific record requests such as AAAA or TXT records after splitting...

7.6AI score
SaveExploits0References3
AlmaLinux
AlmaLinux
added 2021/06/01 9:4 a.m.52 views

Important: glib2 security and bug fix update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: integer overflow in...

7.5CVSS8.2AI score0.02993EPSS
SaveExploits1References1
AlmaLinux
AlmaLinux
added 2021/05/18 6:1 a.m.12 views

new module: swig:4.0

The simplified wrapper and interface generator SWIG is a software development utility to connect C, C++, and Objective C programs with a variety of high-level programming languages. SWIG is used to create high-level interpreted programming environments, systems integration, and as a utility for...

1.8AI score
SaveExploits0References1
OSV
OSV
added 2021/05/06 3:15 p.m.5 views

ALPINE-CVE-2021-30473

aomimage.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap...

9.8CVSS7AI score0.0205EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2021/04/07 3:28 p.m.11 views

Android to Support Rust Programming Language to Prevent Memory Flaws

Google on Tuesday announced that its open source version of the Android operating system will add support for Rust programming language in a bid to prevent memory safety bugs. To that end, the company has been building parts of the Android Open Source Project AOSP with Rust for the past 18 months...

5.9AI score
SaveExploits0
UbuntuCve
UbuntuCve
added 2021/03/10 11:15 p.m.25 views

CVE-2021-21375

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP version 2.10 and earlier, after an initial INVITE has been sent, when two 183 responses are received, with the first on...

6.5CVSS6.7AI score0.02088EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.9 views

The vulnerability of the C API component of the MySQL Database Management System client, which allows a hacker to trigger a service failure.

The vulnerability of the C API component of the MySQL Database Management System client is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL protocol...

6.8CVSS6.8AI score0.03028EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.7 views

The vulnerability of the C API component of the MySQL Database Management System client, which allows a hacker to trigger a service failure.

The vulnerability of the C API component of the MySQL Database Management System client is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL protocol...

4.9CVSS6.4AI score0.01413EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2021/01/20 12:0 a.m.4 views

Unspecified Vulnerability in Oracle MySQL Client (CNVD-2021-04755)

Oracle MySQL is an open source relational database management system.MySQL Client is a MySQL client, a program used to communicate with a server to process information in a database managed by the server. An unspecified vulnerability exists in the C API component in Oracle MySQL Client versions...

7.1CVSS7AI score0.03028EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/11 12:0 a.m.14 views

Duplicate numbering

Freyrscada IEC-60879-5-104 Server Simulator is a software from Freyrscada India for simulating communication between IEDs and RTUs over TCP. The software is written in C for all POSIX compliant operating systems and supports single server simulation with multiple workstations. "Obsolete" Do not u...

7.5CVSS6.5AI score0.01318EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/01/08 12:0 a.m.26 views

Fluent Bit Buffer Overflow Vulnerability

Fluent Bit is an open source log processing and analysis system written in C. A buffer overflow vulnerability exists in Fluent Bit version 1.6.4, which stems from the fact that flbgzipcompress in flbgzip.c has an out-of-bounds write operation because it fails to use the correct calculation of the...

7.8CVSS7.2AI score0.0131EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2020/12/22 11:30 a.m.49 views

0D1N v3.4 - Tool For Automating Customized Attacks Against Web Applications (Full Made In C Language With Pthreads, Have A Fast Performance)

0d1n is a tool for automating customized attacks against web applications. This tool is very faster because uses thread pool and C language. 0d1n is a tool for automating customized attacks against web applications. Video demo: Tool functions: Brute force login and passwords in auth forms Directo...

8.2AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2020/12/22 10:50 a.m.8 views

mysql: C API unspecified vulnerability (CPU Jan 2020)

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.46 and prior, 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...

5.9CVSS6.8AI score0.03485EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2020/12/08 12:0 a.m.3 views

PT-2020-5292 · Microsoft · Azure Sdk For C

Name of the Vulnerable Software and Affected Versions: Azure SDK for C affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the Azure SDK for C, which can be exploited by a remote attacker to impact the confidentiality and integrity of...

9.4CVSS7.2AI score0.03233EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2020/11/11 8:30 p.m.43 views

Octopus WAF - Web Application Firewall Made In C Language And Use Libevent

OctopusWAF is a open source Web application firewall, is made in C language uses libevent to make multiple connections. First step Instal lib-pcre, if you use RPM based distros search pcre-devel package, in BSD based search in ports or brew... Need libevent-dev, on RPM distros libevent-devel,...

7.6AI score
SaveExploits0References2
CNVD
CNVD
added 2020/09/16 12:0 a.m.3 views

Librepo Directory Traversal Vulnerability

Librepo is a library that provides C and Python APIs for downloading packages in rpm-md format and linux repository metadata. A directory traversal vulnerability exists in the Librepo product. The vulnerability stems from a failure of a networked system or product to properly filter special...

8.5CVSS6.9AI score0.02526EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2020/09/15 6:30 p.m.9 views

mysql: C API unspecified vulnerability (CPU Jan 2021)

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 8.0.19 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of thi...

6.3CVSS7.3AI score0.0182EPSS
SaveExploits0References5
Rows per page
Query Builder