3699 matches found
Information Disclosure
php is vulnerable to information disclosure. If the wddx extension was used to import WDDX data from an untrusted source, certain WDDX input packets could expose a random portion of heap memory...
CVE-2016-5254
Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service heap memory corruption and application crash by leveraging keyboard access to use the Alt...
dovecot security and bug fix update
1:2.2.36-6 - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes 1741787 1:2.2.36-5 - fix CVE-2019-3814: improper certificate validation 1674369 - fix CVE-2019-7524: buffer overflow in...
CVE-2020-11104
An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an initialized C/C++ long double variable into a BinaryArchive or PortableBinaryArchive leaks several bytes of stack or heap memory, from which sensitive information such as memory layout or private keys can be gleaned if...
EulerOS 2.0 SP5 : squid (EulerOS-SA-2020-1326)
According to the versions of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such...
EulerOS Virtualization for ARM 64 3.0.2.0 : libxslt (EulerOS-SA-2020-1215)
According to the versions of the libxslt packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for...
Nitro Pro Heap Memory Corruption Vulnerability
Nitro Pro is a desktop product with full PDF creation and editing capabilities. A JBIG2Decode CNxJBIG2DecodeStream heap memory corruption vulnerability exists in npdf.dll in versions prior to Nitro Pro 13.13.2.242. An attacker can exploit this vulnerability via a specially crafted PDF document to...
Nitro Pro Heap Memory Corruption Vulnerability (CNVD-2020-16096)
Nitro Pro is a desktop product with full PDF creation and editing capabilities. A heap memory corruption vulnerability exists in npdf.dll in versions prior to Nitro Pro 13.13.2.242. An attacker can exploit this vulnerability via a specially crafted PDF document to cause heap corruption to occur a...
CVE-2019-19943
The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parameter. It may be possible to achieve remote code execution because of a double free...
Double free
The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parameter. It may be possible to achieve remote code execution because of a double free...
CVE-2019-19943
CVE-2019-19943 affects Pablo Quick n Easy Web Server (quickweb.exe) v3.3.8. The HTTP service is vulnerable to remote unauthenticated heap memory corruption when handling a large host or domain parameter, with a double free cited as the underlying cause. This can lead to remote code execution per...
CVE-2019-19943
The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parameter. It may be possible to achieve remote code execution because of a double free...
EulerOS 2.0 SP8 : librabbitmq (EulerOS-SA-2020-1163)
According to the version of the librabbitmq package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in amqphandleinput in amqpconnection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory...
Quick N Easy Web Server Denial of Service Vulnerability
Quick N Easy Web Server is a web server that supports asp. A denial of service vulnerability exists in Quick N Easy Web Server. An attacker can exploit the vulnerability to cause remote heap memory corruption...
Quick N Easy Web Server 3.3.8 Denial Of Service
Title: Quick N Easy Web Server 3.3.8 - Denial of Service PoC Date: 2019-12-25 Author: Cody Winkler Vendor Homepage: https://www.pablosoftwaresolutions.com/ Software Link: https://www.pablosoftwaresolutions.com/html/quickneasywebserver.html Version: $ python exploit.py 127.0.0.1 80 """ from future...
Quick N Easy Web Server 3.3.8 - Denial of Service Exploit
Title: Quick N Easy Web Server 3.3.8 - Denial of Service PoC Author: Cody Winkler Vendor Homepage: https://www.pablosoftwaresolutions.com/ Software Link: https://www.pablosoftwaresolutions.com/html/quickneasywebserver.html Version: $ python exploit.py 127.0.0.1 80 """ from future import...
Quick N Easy Web Server 3.3.8 - Denial of Service (PoC)
Title: Quick N Easy Web Server 3.3.8 - Denial of Service PoC Date: 2019-12-25 Author: Cody Winkler Vendor Homepage: https://www.pablosoftwaresolutions.com/ Software Link: https://www.pablosoftwaresolutions.com/html/quickneasywebserver.html Version: $ python exploit.py 127.0.0.1 80 """ from future...
Huawei EulerOS: Security Advisory for librabbitmq (EulerOS-SA-2020-1116)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Quick N Easy Web Server 3.3.8 - Denial of Service (PoC)
Quick N Easy Web Server 3.3.8 - Denial of Service PoC Title: Quick N Easy Web Server 3.3.8 - Denial of Service PoC Date: 2019-12-25 Author: Cody Winkler Vendor Homepage: https://www.pablosoftwaresolutions.com/ Software Link: https://www.pablosoftwaresolutions.com/html/quickneasywebserver.html...
EulerOS 2.0 SP5 : librabbitmq (EulerOS-SA-2020-1116)
According to the version of the librabbitmq package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in amqphandleinput in amqpconnection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory...