CVE-2022-34927

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file...

CVE-2022-34927

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file...

Stack overflow

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file...

UBUNTU-CVE-2022-34927

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file...

CVE-2022-34927

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file...

CVE-2022-34927

CVE-2022-34927 affects MilkyTracker v1.03.00. It is a stack overflow in the LoaderXM::load component triggered by a crafted XM module file. Public entries assign high severity (CVSS 3.1: 7.8). The supplied documents do not provide exploitation details or a patch/remediation.

CVE-2022-34927

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file...

CVE-2022-34927

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file...

PT-2022-22437

Name of the Vulnerable Software and Affected Versions MilkyTracker version 1.03.00 Description The issue is a stack overflow in the LoaderXM::load component. It is triggered when a crafted XM module file is supplied to the program. Recommendations For MilkyTracker version 1.03.00, consider avoidi...

CVE-2022-34927

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file...

MilkyTracker buffer error vulnerability

MilkyTracker is an application that plays MOD format files and arranges music. A security vulnerability exists in MilkyTracker v1.03.00, which originates when an attacker provides a crafted XM module file to the LoaderXM::load component, allowing the attacker to take control of the execution flow...

PT-2022-11725 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5215 Description: The issue concerns a remote command injection vulnerability. This vulnerability is located in the setDiagnosisCfg function of the file lib/cste modules/system.so, which can be exploited to...

CVE-2022-1032

Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6...

CVE-2022-1032

Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6...

CVE-2022-1032: Deserialization of Untrusted Data

Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6...

PT-2022-13605

Name of the Vulnerable Software and Affected Versions crater-invoice/crater versions prior to 6.0.6 Description The issue concerns insecure deserialization of a not validated module file in the GitHub repository crater-invoice/crater. Recommendations For versions prior to 6.0.6, update to version...

Insecure deserialization of not validated module file

Description In recent Crater version 18507ddb tag: 6.0.6 highly privileged user can upload malicious module file and run insecure deserialization, which can lead to remote code execution. Proof of Concept 1. Prepare PHAR file - php --define phar.readonly=0 phar.php PHP data = $data; function...

CVE-2021-44238

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE via /aya/module/admin/usttabe.inc.php,...

Logic flaw vulnerability in YCCMS Ad***.cl***.php file

YCCMS is a version of PHP5 + MYSQL as the technical basis for the development of lightweight CMS station-building system. A logic flaw exists in the YCCMS Ad.cl.php file. An attacker can use the vulnerability to change any user name and password without authorization...

OpenMPT libopenmpt DoS

The vulnerability in the “soundlib/Sndfx.cpp” file of the OpenMPT tracker software and the libopenmpt library for processing modular music is related to buffer overflows and reading beyond the maximum memory limit. Exploiting this vulnerability could allow a malicious actor to cause service...