2021 matches found
PT-2017-18815
Name of the Vulnerable Software and Affected Versions Open vSwitch OvS version 2.6.1 Description The issue is related to a buffer over-read that occurs while parsing malformed TCP, UDP, and IPv6 packets. This can be triggered remotely and is associated with the functions extract l3 ipv6, extract ...
CVE-2017-8932
A carry propagation flaw was found in the implementation of the P-256 elliptic curve in golang. An attacker could possibly use this flaw to extract private keys when static ECDH was used...
CVE-2016-4313
Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitrary files via a .. dot dot in an archive file...
CVE-2016-4313
Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitrary files via a .. dot dot in an archive file...
CVE-2016-4313
CVE-2016-4313 affects eXtplorer 2.1.9 (and earlier) in the unzip/extract feature, enabling directory traversal and arbitrary file writes via crafted archives containing "../". Affected component is the unzip/extract functionality; root cause is path traversal in archive extraction. Reported impac...
CVE-2016-4313
Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitrary files via a .. dot dot in an archive file...
PT-2017-8467
Name of the Vulnerable Software and Affected Versions eXtplorer version 2.1.9 Description The issue allows remote attackers to execute arbitrary files via a .. dot dot in an archive file, leveraging a directory traversal vulnerability in the unzip/extract feature. Recommendations For eXtplorer...
CVE-2016-4313: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitrary files via a .. dot dot in an archive file...
icoutils: Buffer overflow in the extract_icons function
A vulnerability was found in icoutils, in the icotool program. An attacker could create a crafted ICO or CUR file that, when read by icotool, could result in memory corruption leading to a crash or potential code execution...
PT-2017-17575
Name of the Vulnerable Software and Affected Versions libav versions 9.21 Description The issue allows remote attackers to cause a denial of service or obtain sensitive information from process memory via a crafted h264 video file. This is due to a heap-based buffer over-read in the ff h2645...
Docker Security Analysis Tools: dockerscan
Docker Security Analysis Tools Currently Docker Scan support these actions: Registry Delete: Delete remote image / tag Info: Show info from remote registry Push: Push and image like Docker client Upload: Upload random a file Image Analyze: Looking for sensitive information in a Docker image...
Design/Logic Flaw
Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extract image fragments on systems with GeForce 8600M graphics chips via a crafted HTML page...
DEBIAN-CVE-2017-6011
An issue was discovered in icoutils 0.31.1. An out-of-bounds read leading to a buffer overflow was observed in the "simplevec" function in the "extract.c" source file. This affects icotool...
DEBIAN-CVE-2017-6010
An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "extracticons" function in the "extract.c" source file. This issue can be triggered by processing a corrupted ico file and will result in an icotool crash...
UBUNTU-CVE-2017-6011
An issue was discovered in icoutils 0.31.1. An out-of-bounds read leading to a buffer overflow was observed in the "simplevec" function in the "extract.c" source file. This affects icotool...
PT-2017-16829
Name of the Vulnerable Software and Affected Versions icoutils version 0.31.1 Description A buffer overflow issue was found in the extract icons function, located in the extract.c source file. This issue can be triggered by processing a corrupted ico file, resulting in an icotool crash...
UBUNTU-CVE-2017-6010
An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "extracticons" function in the "extract.c" source file. This issue can be triggered by processing a corrupted ico file and will result in an icotool crash...
Unarj Re-record
The vulnerability of the -x command line option for extracting the unarj library, which handles data archiving, is related to deficiencies in path name restrictions. Exploiting this vulnerability allows a malicious actor to overwrite arbitrary files using an arj archive with file names containing...
Carlo Gavazzi Energy Meters - Login Brute Force, Extract Info and Dump Plant Database
This module scans for Carlo Gavazzi Energy Meters login portals, performs a login brute force attack, enumerates device firmware version, and attempt to extract the SMTP configuration. A valid, admin privileged user is required to extract the SMTP password. In some older firmware versions, the SM...
PHP study notes and security vulnerabilities-vulnerability warning-the black bar safety net
System variables $POST // get the post data is a dictionary $GET // get get data, is a dictionary The error control operator PHP supports one error control operator:@the. When it is placed in a PHP expression, the expression may produce any error information is ignored. Variable default value Whe...