828 matches found
daloRADIUS 跨站脚本漏洞
daloRADIUS is an advanced RADIUS web management application from Liran Tal Personal Developer. It is designed to manage hotspot and universal ISP deployments. A cross-site scripting vulnerability exists in daloRADIUS, which stems from the presence of XSS in the GitHub repository lirantal/daloradi...
CVE-2023-0338 Cross-site Scripting (XSS) - Reflected in lirantal/daloradius
Cross-site Scripting XSS - Reflected in GitHub repository lirantal/daloradius prior to master-branch...
PT-2023-16190 · Unknown · Daloradius
Name of the Vulnerable Software and Affected Versions: daloradius versions prior to master-branch Description: The issue is related to Cross-site Scripting XSS - Reflected in the GitHub repository lirantal/daloradius. This type of attack occurs when an application includes user input in its...
daloRADIUS 跨站脚本漏洞
daloRADIUS is an advanced RADIUS web management application from Liran Tal Personal Developer. Designed to manage hotspot and universal ISP deployments. A cross-site scripting vulnerability exists in daloradius, which stems from the presence of XSS in the GitHub repository lirantal/daloradius...
CVE-2023-0046
Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch...
PT-2023-15970 · Unknown · Lirantal/Daloradius
Name of the Vulnerable Software and Affected Versions: lirantal/daloradius versions prior to master-branch Description: The issue is related to improper restriction of names for files and other resources. This affects the GitHub repository lirantal/daloradius. Recommendations: For versions prior ...
CVE-2023-0048 Code Injection in lirantal/daloradius
Code Injection in GitHub repository lirantal/daloradius prior to master-branch...
CVE-2023-0048 Code Injection in lirantal/daloradius
Code Injection in GitHub repository lirantal/daloradius prior to master-branch...
Arbitrary Command Injection
Overview printer is a module for sending commands to a small thermal printer Affected versions of this package are vulnerable to Arbitrary Command Injection in the saveurltopath function in lib/printer/jobs/preparepage.rb. Remediation A fix was pushed into the master branch but not yet published...
NULL Pointer Dereference
Environment bash Distributor ID: Debian Description: Debian GNU/Linux bookworm/sid Release: n/a Codename: bookworm Version I checked against the latest release as of 12/27/22 version 5.8.0 and the current master branch at commit 031da1be8f6c9aa55f6e4e76df962d2c85dc32e8 . Description This...
Design/Logic Flaw
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread when parsing a certain STUN message. The vulnerability...
CVE-2022-23547 Heap buffer overflow in pjproject when decoding STUN message
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread when parsing a certain STUN message. The vulnerability...
CVE-2022-23547
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread when parsing a certain STUN message. The vulnerability...
CVE-2022-23547 Heap buffer overflow in pjproject when decoding STUN message
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread when parsing a certain STUN message. The vulnerability...
CVE-2022-23547
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread when parsing a certain STUN message. The vulnerability...
OpenImageIO 缓冲区错误漏洞
OpenImageIO is OpenImageIO open source an image processing library . With an easy-to-use interface and a large number of supported image formats. A security vulnerability exists in OpenImageIO master-branch-9aeece7a version, v2.3.19.0, which stems from a heap-based buffer overflow vulnerability i...
CVE-2022-23537
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a specially crafted STUN message with unknown attribute. The vulnerability affects...
Design/Logic Flaw
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a specially crafted STUN message with unknown attribute. The vulnerability affects...
CVE-2022-23537 PJSIP vulnerable to heap buffer overflow when decoding STUN message
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a specially crafted STUN message with unknown attribute. The vulnerability affects...