PT-2021-27994

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack buffer overflow error, which occurs during the execution of certain functions. Specifically, the functions fn ElIn evaluate...

PT-2021-27995

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as chunk free object and gs font dir finalize. No information...

PT-2021-6244

Name of the Vulnerable Software and Affected Versions NETGEAR GS108Tv2 versions prior to 5.4.2.36 NETGEAR GS110TPP versions prior to 7.0.7.2 NETGEAR GS110TPv2 versions prior to 5.4.2.36 NETGEAR GS110TPv3 versions prior to 7.0.7.2 NETGEAR GS308T versions prior to 1.0.3.2 NETGEAR GS310TP versions...

PT-2021-27969

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Memcpy-param-overlap. The crash state involves several function calls, including gs fapi do char, pdfi...

PT-2021-27955

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash, specifically a Segv on an unknown address. The crash state includes references to ngx adjust color Pattern, gs setcolor, a...

Command injection in itext7-core

iTextPDF in iText before 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command line in GhostscriptHelper.java...

PT-2021-27937

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type known as Memcpy-param-overlap. The crash state involves several functions: pdfi set input stream, zPDFstream, and gs...

PT-2021-27941

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash, specifically a Segv on an unknown address. The crash state includes functions such as cs adjust counts icc, gstate clone...

PT-2021-21859

Name of the Vulnerable Software and Affected Versions: Grandstream HT801 versions prior to 1.0.29 Description: The issue is related to multiple buffer overflows in the limited configuration shell /sbin/gs config that allow remote authenticated users to execute arbitrary code as root via a crafted...

gs-meigen.de Cross Site Scripting vulnerability OBB-2166628

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-40350

webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be achieved by including an administrative cookie that the device does not validate...

CVE-2021-40350

webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be achieved by including an administrative cookie that the device does not validate...

Authentication flaw

webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be achieved by including an administrative cookie that the device does not validate...

CVE-2021-40350

CVE-2021-40350 affects Christie Digital DWU850-GS devices (firmware V06.46) via webctrl.cgi.elf. A crafted query with an unspecified Cookie header can bypass authentication, allowing an attacker to perform arbitrary actions. The root cause is an authentication bypass through cookie handling, with...

CVE-2021-40350: Improper Authentication

webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be achieved by including an administrative cookie that the device does not validate...

PT-2021-22870

Name of the Vulnerable Software and Affected Versions Christie Digital DWU850-GS version V06.46 Description The issue allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be achieved by including an administrative...

Christie Digital DWU850-GS 授权问题漏洞

The Christie Digital DWU850-GS is a laser projector from Christie. A security vulnerability in webctrl.cgi.elf in the firmware of the Christie Digital DWU850-GS version V06.46 can be exploited by an attacker to perform any desired action via a specially crafted query containing an unspecified...

Gigaset Android Update Server Hacked to Install Malware on Users' Devices

Gigaset has revealed a malware infection discovered in its Android devices was the result of a compromise of a server belonging to an external update service provider. Impacting older smartphone models — GS100, GS160, GS170, GS180, GS270 plus, and GS370 plus series — the malware took the form of...

Weak Password Vulnerability in GS Series Enterprise Application Gateway of Hangzhou Guanhang Technology Co.

Hangzhou Guanhang Technology Co., Ltd. is an innovative manufacturer of intelligent network solutions. Dedicated to the development and application of enterprise-class wireless network, Internet of Things IoT and smart switch products, it is a next-generation enterprise-class wireless, IoT and...

PT-2021-28059

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to ...