CVE-2023-23088

Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the jsonvalueparse function...

MAL-2023-496 Malicious code in hellosign-embedded-cla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48e040d099ac8087da48a2e03051478f6929f6ccc2c841992999d9160c6d8ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hellosign-embedded-cla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48e040d099ac8087da48a2e03051478f6929f6ccc2c841992999d9160c6d8ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

Eta is an embedded JS templating engine that works inside Node, Deno, and the browser. XSS attack - anyone using the Express API is impacted. The problem has been resolved. Users should upgrade to version 2.0.0. As a workaround, don't pass user supplied things directly to res.render...

CVE-2023-23630

CVE-2023-23630 affects Eta, a JS templating engine used with Node/Express; the XSS vulnerability exists when user-supplied data is passed to res.render. Root cause is improper handling of input leading to script injection. The issue has been fixed in Eta v2.0.0. Workarounds include not passing us...

Dell BIOS 缓冲区错误漏洞

The Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. A security vulnerability exists in Dell BIOS that stems from the presence of a heap buffer overflow vulnerability that could be exploited by a local attacker with administrator privileges to perform...

Eta 跨站脚本漏洞

Eta is Eta open source a lightweight , fast embedded JS template engine . Can run in Node, Deno and browser . A cross-site scripting vulnerability exists in Eta. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

CVE-2022-45920

In Softing uaToolkit Embedded before 1.41, a malformed CreateMonitoredItems request may cause a memory leak...

CVE-2022-44018

In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application...

CVE-2022-44018

In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application...

Null pointer dereference

In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application...

Softing uaToolkit Embedded 代码问题漏洞

Softing UaToolkit Embedded is used to support the development of embedded Opc Ua applications via client/server and publisher/subscriber communications from Softing Germany. A security vulnerability exists in Softing uaToolkit Embedded prior to version 1.40.1, which stems from an incorrectly...

Softing uaToolkit Embedded 安全漏洞

Softing UaToolkit Embedded is used to support the development of embedded Opc Ua applications via client/server and publisher/subscriber communication by Softing Germany. A security vulnerability exists in Softing uaToolkit Embedded prior to version 1.41, which stems from an incorrectly formatted...

CVE-2022-44018

In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application...

PT-2023-14794 · Softing · Uatoolkit Embedded

Name of the Vulnerable Software and Affected Versions: Softing uaToolkit Embedded versions prior to 1.41 Description: The issue is caused by a malformed CreateMonitoredItems request, which may lead to a memory leak. Recommendations: For versions prior to 1.41, update to version 1.41 or later to...

PT-2023-14423 · Softing · Uatoolkit Embedded

Name of the Vulnerable Software and Affected Versions: Softing uaToolkit Embedded versions prior to 1.40.1 Description: A malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application. Recommendations: For version...

CVE-2022-45920

CVE-2022-45920 affects Softing uaToolkit Embedded prior to version 1.41. The root cause is a malformed CreateMonitoredItems request that can cause a memory leak, with CVSSv3.1 metrics indicating NETWORK attack vector, LOW attack complexity, no privileges or user interaction required, and an avail...

Loan Comparison < 1.5.2 - Reflected XSS via shortcode

The plugin does not validate and escape some of its query parameters before outputting them back in a page/post via an embedded shortcode, which could allow an attacker to inject javascript into into the site via a crafted URL. PoC Create a page "Test" containing the shortcode "loancomparison",...

Exploit for Improper Access Control in Lexmark B2236_Firmware

PoC for CVE-2023-22960 !Pythonhttps://img.shields.io/badg...

Adobe Acrobat Reader DC Font Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...