Exploit for Improper Input Validation in Microsoft

CVE-2023-23397 CVE-2023-23397 C PoC 1- download the msgkit 2...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap-based buffer over-read in the prtpbuilderdohevc function of rtppckmpeg4.c, allowing an attacker to cause an application crash...

[SECURITY] Fedora 36 Update: gnutls-3.8.0-2.fc36

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...

SUSE CVE-2023-27789

An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint...

The vulnerability of the ares_set_sortlist function in the c-ares asynchronous DNS request library allows a attacker to cause service failures or have limited impact on confidentiality and integrity.

The vulnerability of the aressetsortlist function in the asynchronous DNS query library c-ares is related to the lack of validation for the input string. This allows for a possible overflow of the stack of any length. Exploiting this vulnerability could enable an attacker to cause service failure...

PT-2023-9308 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev35-gbbca86917-master Description: A vulnerability has been found in the function gf av1 reset state of the file media tools/av parsers.c, which leads to double free. The manipulation can be launched on the local host...

Important Photon OS Security Update - PHSA-2023-3.0-0552

Updates of 'c-ares' packages of Photon OS have been released...

DEBIAN-CVE-2023-27784

An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the readhexstring function at the utils.c:309 endpoint...

UBUNTU-CVE-2023-27784

An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the readhexstring function at the utils.c:309 endpoint...

TCPprep 安全漏洞

Appneta tcpprep is a set of open source GPLv3 licensed utilities from Appneta, Inc. For UNIX and Win32 under Cygwin operating systems, it is used to edit and replay network traffic previously captured by tools such as tcpdump and Wireshark. A security vulnerability exists in TCPprep version...

ROS-20230316-01

Vulnerability in C library related to c-ares package, where aressetsortlist lacks input string validation, allowing possible stack overflow. package in which aressetsortlist lacks input string validation, which allows possible stack overflow of arbitrary length. Exploitation of the vulnerability...

Liblouis 安全漏洞

Liblouis is an open-source Braille translator written in C. A security vulnerability exists in Liblouis version v.3.24.0, which stems from the presence of a buffer overflow vulnerability that can be exploited by a remote attacker to cause a denial of service via the loulogFile function in the...

TCPrewrite 安全漏洞

AppNeta TCPrewrite is AppNeta's tool for editing and replaying network traffic previously captured by tools such as tcpdump and Wireshark. A security vulnerability exists in TCPrewrite version v.4.4.3. An attacker exploited the vulnerability to cause a denial of service via the ports2PORT functio...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Joseph C Dolson My Calendar plugin = 3.3.24.1 versions...

CVE-2022-47427

CVE-2022-47427: WordPress My Calendar plugin

CVE-2022-47427 WordPress My Calendar Plugin <= 3.3.24.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Joseph C Dolson My Calendar plugin = 3.3.24.1 versions...

CVE-2022-47427 WordPress My Calendar Plugin <= 3.3.24.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Joseph C Dolson My Calendar plugin = 3.3.24.1 versions...

[SECURITY] Fedora 37 Update: libmemcached-awesome-1.1.4-1.fc37

libmemcached-awesome is a C/C++ client library and tools for the memcached server https://memcached.org/. It has been designed to be light on memory usage, and provide full access to server side methods. This is a resurrection of the original work from Brian Aker at libmemcached.o rg...

[SECURITY] Fedora 36 Update: libmemcached-awesome-1.1.4-1.fc36

libmemcached-awesome is a C/C++ client library and tools for the memcached server https://memcached.org/. It has been designed to be light on memory usage, and provide full access to server side methods. This is a resurrection of the original work from Brian Aker at libmemcached.o rg...

Fedora: Security Advisory for libmemcached-awesome (FEDORA-2023-7da1639d3f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...