91 matches found
CVE-2025-12204 Kamailio Configuration File rvalue.c rve_destroy heap-based overflow
A security vulnerability has been detected in Kamailio 5.5. Impacted is the function rvedestroy of the file src/core/rvalue.c of the component Configuration File Handler. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed...
Kamailio 缓冲区错误漏洞
Kamailio is an open source implementation of a SIP signaling server from Kamailio Open Source. A buffer error vulnerability exists in Kamailio version 5.5, which stems from a heap buffer overflow in the function rvedestroy in the file src/core/rvalue.c of the component Configuration File Handler,...
PT-2025-43865
Name of the Vulnerable Software and Affected Versions Kamailio version 5.5 Description A flaw exists in Kamailio that involves a use-after-free condition. This issue is located within the Configuration File Handler component, specifically in the sr push yy state function of the src/core/cfg.lex...
CVE-2025-12205: Use After Free
A vulnerability was detected in Kamailio 5.5. The affected element is the function srpushyystate of the file src/core/cfg.lex of the component Configuration File Handler. The manipulation results in use after free. The attack must be initiated from a local position. The exploit is now public and...
CVE-2025-12204: Heap-based Buffer Overflow
A security vulnerability has been detected in Kamailio 5.5. Impacted is the function rvedestroy of the file src/core/rvalue.c of the component Configuration File Handler. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed...
CVE-2025-11947
CVE-2025-11947 affects bftpd up to version 6.2. The vulnerability is a heap-based overflow in the expand_groups function of options.c within the Configuration File Handler. Exploitation requires local access (attack vector: LOCAL) with HIGH complexity and LOW privileges, as described in the sourc...
bftpd 安全漏洞
Bftpd is an FTP File Transfer Protocol server. A security vulnerability exists in bftpd 6.2 and earlier versions, which originates from a heap buffer overflow in the function expandgroups in the file options.c of the component Configuration File Handler, which could lead to a localhost attack...
PT-2025-42726
Name of the Vulnerable Software and Affected Versions bftpd versions up to 6.2 Description A flaw exists in bftpd related to the expand groups function within the Configuration File Handler component, specifically in the file options.c. This can lead to a heap-based buffer overflow. The attack is...
CVE-2025-11947: Heap-based Buffer Overflow
A weakness has been identified in bftpd up to 6.2. Impacted is the function expandgroups of the file options.c of the component Configuration File Handler. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack on the local host. Attacks of this natur...
EUVD-2024-51180
Malicious code in bioql PyPI...
EUVD-2023-38103
Malicious code in bioql PyPI...
EUVD-2025-31351
Malicious code in bioql PyPI...
EUVD-2025-8682
Malicious code in bioql PyPI...
EUVD-2025-20160
Malicious code in bioql PyPI...
CVE-2025-11026
A vulnerability was determined in givanz Vvveb up to 1.0.7.2. Affected by this vulnerability is an unknown functionality of the component Configuration File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and...
CVE-2025-11026
A vulnerability was determined in givanz Vvveb up to 1.0.7.2. Affected by this vulnerability is an unknown functionality of the component Configuration File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and...
CVE-2025-11026 givanz Vvveb Configuration File information disclosure
A vulnerability was determined in givanz Vvveb up to 1.0.7.2. Affected by this vulnerability is an unknown functionality of the component Configuration File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and...
CVE-2025-11026
Summary: CVE-2025-11026 affects givanz Vvveb up to 1.0.7.2, specifically a flaw in the Configuration File Handler that can lead to information disclosure. The vulnerability description indicates remote initiation and that the exploit has been publicly disclosed. The root cause is tied to mis-hand...
CVE-2025-11026 givanz Vvveb Configuration File information disclosure
A vulnerability was determined in givanz Vvveb up to 1.0.7.2. Affected by this vulnerability is an unknown functionality of the component Configuration File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and...
PT-2025-39649
Name of the Vulnerable Software and Affected Versions givanz Vvveb versions up to 1.0.7.2 Description A flaw exists within the Configuration File Handler component that can lead to information disclosure. The issue is potentially exploitable remotely. The exploit has been publicly disclosed...