3718 matches found
PT-2023-3031 · Autodesk · Autodesk 3Ds Max
Name of the Vulnerable Software and Affected Versions: Autodesk 3dsMax affected versions not specified Description: The issue is related to a use-after-free vulnerability. It can be triggered by opening a specially crafted USD file, potentially allowing an attacker to execute arbitrary code...
GHSA-W9G2-3W7P-72G9 Incorrect success value returned in vyper
Background During the audit of Lido's Gate Seals code statemind team identified a weird behavior of the code that uses rawcall: https://github.com/lidofinance/gate-seals/blob/051593e74df01a4131c485b4fda52e691cd4b7d8/contracts/GateSeal.vyL164 . Construction like this: vyper success = rawcall...
PYSEC-2023-131
Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions 0.3.1 through 0.3.7, the Vyper compiler generates the wrong bytecode. Any contract that uses the rawcall with revertonfailure=False and maxoutsize=0 receives the wrong response from rawcall. Depending on the...
PT-2023-22826 · Vyper · Vyper
Name of the Vulnerable Software and Affected Versions: Vyper versions 0.3.1 through 0.3.7 Description: The Vyper compiler generates the wrong bytecode in versions 0.3.1 through 0.3.7. Any contract that uses the raw call with revert on failure=False and max outsize=0 receives the wrong response fr...
CVE-2023-2231
A vulnerability, which was classified as critical, was found in MAXTECH MAX-G866ac 0.4.1TBRO20160314. This affects an unknown part of the component Remote Management. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed t...
CVE-2023-2231
A vulnerability, which was classified as critical, was found in MAXTECH MAX-G866ac 0.4.1TBRO20160314. This affects an unknown part of the component Remote Management. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed t...
Authentication flaw
A vulnerability, which was classified as critical, was found in MAXTECH MAX-G866ac 0.4.1TBRO20160314. This affects an unknown part of the component Remote Management. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed t...
CVE-2023-2231
The CVE-2023-2231 entry describes a critical vulnerability in MAXTECH MAX-G866ac firmware (0.4.1_TBRO_20160314) within the Remote Management component. The root cause is a missing authentication control, enabling remote exploitation without user interaction. Multiple sources reiterate that an att...
PT-2023-18418 · Maxtech · Maxtech Max-G866Ac
Name of the Vulnerable Software and Affected Versions: MAXTECH MAX-G866ac version 0.4.1 TBRO 20160314 Description: A critical vulnerability was found in the Remote Management component, leading to missing authentication. The manipulation can be initiated remotely. The exploit has been disclosed t...
CVE-2023-2231: Missing Authentication for Critical Function
A vulnerability, which was classified as critical, was found in MAXTECH MAX-G866ac 0.4.1TBRO20160314. This affects an unknown part of the component Remote Management. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed t...
GHSA-QW69-RQJ8-6QW8 OutOfMemoryError for large multipart without filename in Eclipse Jetty
Impact Servlets with multipart support e.g. annotated with @MultipartConfig that call HttpServletRequest.getParameter or HttpServletRequest.getParts may cause OutOfMemoryError when the client sends a multipart request with a part that has a name but no filename and a very large content. This...
max-holzinger.de Cross Site Scripting vulnerability OBB-3265336
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-35763 · Git +1 · Systemd
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash involves the log set max level function and the fuzz-journal-remote.c...
Denial Of Service (DoS)
github.com/42atomys/stud42 is vulnerable to Denial of Service DoS. The vulnerability exits due to the graphQL parser which has the potential to overload the API pod because it does not check for a max content length, resulting in an attacker crashing the application...
Roxy Fileman 1.4.5 Shell Upload
Exploit Title: Roxy Fileman 1.4.5 For .NET Arbitrary File Upload Date: 09/04/2023 Exploit Author: Zer0FauLT [email protected] Vendor Homepage: roxyfileman.com Software Link: https://web.archive.org/web/20190317053437/http://roxyfileman.com/download.php?f=1.4.5-net Version: = 1.4.5 Tested on:...
CVE-2023-27770
An issue found in Wondershare Technology Co.,Ltd Edraw-max v.12.0.4 allows a remote attacker to execute arbitrary commands via the edraw-maxsetupfull5371.exe file...
Design/Logic Flaw
An issue found in Wondershare Technology Co.,Ltd Edraw-max v.12.0.4 allows a remote attacker to execute arbitrary commands via the edraw-maxsetupfull5371.exe file...
CVE-2023-27770
Affected product: Wondershare Edraw-max 12.0.4. Description indicates an issue where the edraw-max_setup_full5371.exe file can be exploited to execute arbitrary commands, implying a remote command execution risk. Root cause and exact exploit vector are not detailed in the provided documents; no p...
