3927 matches found
CVE-2019-5442
XML Entity Expansion Billion Laughs Attack on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts of heap memory is taken. Eventually, the JVM process will run out of memory. Otherwise, if the OS does not bound the memory on that process, memory will...
CVE-2019-5442
XML Entity Expansion Billion Laughs Attack on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts of heap memory is taken. Eventually, the JVM process will run out of memory. Otherwise, if the OS does not bound the memory on that process, memory will...
CVE-2019-5442
XML Entity Expansion Billion Laughs Attack on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts of heap memory is taken. Eventually, the JVM process will run out of memory. Otherwise, if the OS does not bound the memory on that process, memory will...
CVE-2019-5442
CVE-2019-5442 describes an XML Entity Expansion (Billion Laughs) vulnerability in Pippo 1.12.0 where untrusted XML parsing can trigger recursive entities via a DTD, causing DoS through excessive heap memory consumption and potential JVM memory exhaustion. Connected records confirm Pippo 1.12.0 as...
PT-2019-6176 · Artifex +2 · Mupdf +2
Name of the Vulnerable Software and Affected Versions: Artifex MuPDF versions prior to 1.18.0 Description: The issue is related to a heap-based buffer over-write in the tiff expand colormap function when parsing TIFF files. This allows attackers to cause a denial of service. The exploitation of...
Shade Ransomware Expands to U.S. Targets
Shade, a ransomware known to target Russian victims, has been spotted in several recent campaigns scoping out new locations – including in the U.S. and Japan. The ransomware, first spotted in late 2014 by Kaspersky Lab researchers, has been known for focusing on Russian victims – but more recent...
Oracle CTI Web Service - 'EBS_ASSET_HISTORY_OPERATIONS' XML Entity Injection
Exploit Title: Oracle CTI Web Service XML Entity Exp. Exploit Author: omurugur Author Web: https://www.justsecnow.com Author Social: @omurugurrr URL : http://server/EBSASSETHISTORYOPERATIONS As can be seen in the following request / response example, the xml entity expansion attack can be...
MGASA-2019-0156 Updated openssh packages fix security vulnerabilities
Updated openssh packages fix security vulnerabilities: Due to missing character encoding in the progress display, the object name can be used to manipulate the client output, for example to employ ANSI codes to hide additional files being transferred CVE-2019-6109. Due to scp client insufficient...
Rockwell Automation Stratix 8300 18-Port managed switch 1783-RMS10T plus 8-Port Expansion Module Communications Adapter
Binary data 752998.prm...
Panasonic AFP0RE8YT Expansion Module Detection
Binary data 755287.prm...
Panasonic AFPG431 Expansion Module Detection
Binary data 755149.prm...
Mitsubishi FX-16E-TB/UL Expansion Module Detection
Binary data 754973.prm...
Honeywell 2MLF-RD4A-CC Expansion Module Detection
Binary data 750925.prm...
Rockwell Automation Stratix 8000 26-Port managed switch 1783-MS10T plus two 8-Port Expansion Modules Communications Adapter
Binary data 752983.prm...
GE IC693NIU004 PACSystems RX3i Ethernet Remote I/O Expansion (Slave) Detection
Binary data 755503.prm...
Panasonic AFP0RE16RS Expansion Module Detection
Binary data 755117.prm...
Rockwell Automation Stratix 8300 18-Port Layer 3 managed switch 1783-RMS10T plus two 4-Port Expansion Modules Communications Adapter
Binary data 753042.prm...
Mitsubishi WS0-MPL000201 Expansion Module Detection
Binary data 751854.prm...