Go SSH Denial of Service Vulnerability

Go SSH is an extremely clean ssh tool developed using the go language for remotely managing linux, unix and other machines. Go SSH suffers from a denial of service vulnerability that stems from a networked system or product that does not properly validate incoming data, which can be exploited by ...

Python Input Validation Error Vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. An input validation error vulnerability exists in Python. The vulnerability originates from a networked...

Unspecified Vulnerability in PlaySMS

PlaySMS is a web-based SMS platform. The platform supports connectivity to SMS gateways, personal messaging systems, and corporate group communication tools. A security vulnerability exists in PlaySMS. The vulnerability stems from a web-based system or product that does not properly validate...

Lustre mdt module input validation error vulnerability

Lustre is a parallel distributed file system typically used in large computer clusters and supercomputers, of which Lustre mdt is a module. An input validation error vulnerability exists in the Lustre mdt module. The vulnerability stems from a network system or product that does not properly...

Git Input Validation Error Vulnerability

Git is a free, open source distributed version control system. An input validation error vulnerability exists in Git. The vulnerability originates from a network system or product that does not properly validate incoming data. No details of the vulnerability are provided at this time...

The vulnerability of the Web Intelligence HTML interface of the SAP BusinessObjects Business Intelligence platform, related to the lack of measures for cleaning incoming data, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Web Intelligence HTML interface of the SAP BusinessObjects Business Intelligence platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Apache Atlas metadata management system, related to the lack of measures for cleaning incoming data, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Apache Atlas metadata management system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20162)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. An input validation error vulnerability exists in Audio in multiple Qualcomm products. The vulnerability...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20161)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. An input validation error vulnerability exists in HLOS in multiple Qualcomm products. The vulnerability...

CURL-CVE-2018-16890 NTLM type-2 out-of-bounds buffer read

libcurl contains a heap buffer out-of-bounds read flaw. The function handling incoming NTLM type-2 messages lib/vauth/ntlm.c:ntlmdecodetype2target does not validate incoming data correctly and is subject to an integer overflow vulnerability. Using that overflow, a malicious or broken NTLM server...

CVE-2018-17189

In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 modhttp2 connections...

MGASA-2017-0119 Updated xstream packages fix security vulnerability

A vulnerability was found in XStream. Parsing a maliciously crafted file could cause the application to crash. The processed stream at unmarshalling type contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. Th...

USN-3161-1: Linux kernel vulnerabilities

Tilman Schmidt and Sasha Levin discovered a use-after-free condition in the TTY implementation in the Linux kernel. A local attacker could use this to expose sensitive information kernel memory. CVE-2015-8964 It was discovered that the Video For Linux Two v4l2 implementation in the Linux kernel d...

DEDECMS full version gotopage variable XSS ROOTKITS, 0DAY-vulnerability warning-the black bar safety net

Affected versions: DEDECMS full version The vulnerability described in: DEDECMS background landing template gotopage variable is not tested incoming data, leading toXSSvulnerabilities. \dede\templets\login.htm 6 5 the left and right input type="hidden" name="gotopage" value="? php if!...

Buffer overflow

Buffer overflow in SUSE blinux aka sbl in SUSE openSUSE 10.3 through 11.0 has unknown impact and attack vectors related to "incoming data and authentication-strings."...

Freeciv Server <= 2.0.0beta8 Denial of Service Exploit

No description provided by source. !/usr/bin/perl Freeciv Server = 2.0.0beta8 DoS exploit windows&linux releases Vendor: http://www.freeciv.org/ Advisory: Nico Spicher http://triplex.it-helpnet.de/ There is a vulnerability in the handling of incoming data. If the request is uncomplete or modified...

Freeciv Server 2.0.0beta8 - Denial of Service

Freeciv Server 2.0.0beta8 - Denial of Service !/usr/bin/perl Freeciv Server \n"; exit1; system "clear"; $server = $ARGV0; print "- Freeciv DoS Exploit\n\n"; print "- Server IP: "; print $server; print "\n- Connecting to IP ...\n"; $socket = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$server"...

Freeciv Server 2.0.0beta8 - Denial of Service

!/usr/bin/perl Freeciv Server \n"; exit1; system "clear"; $server = $ARGV0; print "- Freeciv DoS Exploit\n\n"; print "- Server IP: "; print $server; print "\n- Connecting to IP ...\n"; $socket = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$server", PeerPort = "5555"; unless $socket die "-...