27 matches found
Valve: Unchecked weapon id in WeaponList message parser on client leads to RCE
Let's look at WeaponList message parser code in the HLSDK: cpp int CHudAmmo::MsgFuncWeaponListconst char pszName, int iSize, void pbuf BEGINREAD pbuf, iSize ; WEAPON Weapon; strcpy Weapon.szName, READSTRING ; Weapon.iAmmoType = intREADCHAR; Weapon.iMax1 = READBYTE; if Weapon.iMax1 == 255...
phpBB 'includes/message_parser.php' HTML injection vulnerability
phpBB is phpBB group developed a set of open source and PHP-based Web forum software . The software has support for multiple languages , multiple databases and customized layout and so on. An HTML injection vulnerability exists in versions prior to phpBB 3.0.8, which arises from the program's...
phpBB 'includes/message_parser.php' HTML Injection Vulnerability
phpBB is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal...
Code injection
The hpssd message parser in hpssd.py in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to cause a denial of service process stop via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207...
CVE-2008-2941
The hpssd message parser in hpssd.py in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to cause a denial of service process stop via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207...
CVE-2008-2941
CVE-2008-2941 is tied to the hpssd message parser in HP Linux Imaging and Printing (HPLIP) 1.6.7. A local attacker can cause a denial of service by sending specially crafted packets to TCP port 2207, stopping the hpssd process. The issue is documented across multiple advisories (e.g., RHSA-2008:0...
