Lucene search
+L

24 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-19006

Malicious code in bioql PyPI...

7.5CVSS5.5AI score0.00799EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/06/26 1:19 p.m.•18 views

CVE-2025-6566

A vulnerability was found in oatpp Oat++ up to 1.3.1. It has been declared as critical. This vulnerability affects the function deserializeArray of the file src/oatpp/json/Deserializer.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit ha...

6.9CVSS7.4AI score0.00799EPSS
SaveExploits1References1
NVD
NVD
•added 2025/06/24 1:15 p.m.•21 views

CVE-2025-6566

A vulnerability was found in oatpp Oat++ up to 1.3.1. It has been declared as critical. This vulnerability affects the function deserializeArray of the file src/oatpp/json/Deserializer.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit ha...

7.5CVSS0.00799EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/24 1:00 p.m.•64 views

CVE-2025-6566

CVE-2025-6566 affects oatpp Oat++ up to 1.3.1. The vulnerability resides in deserializeArray() in Deserializer.cpp and causes a stack-based buffer overflow. It can be triggered remotely, and the exploit has been publicly disclosed. Multiple sources corroborate the issue across CVE feeds and advis...

7.5CVSS7.3AI score0.00799EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/06/24 1:00 p.m.•11 views

CVE-2025-6566 oatpp Oat++ Deserializer.cpp deserializeArray stack-based overflow

A vulnerability was found in oatpp Oat++ up to 1.3.1. It has been declared as critical. This vulnerability affects the function deserializeArray of the file src/oatpp/json/Deserializer.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit ha...

6.9CVSS7.3AI score0.00799EPSS
SaveExploits1References5
OSV
OSV
•added 2025/06/24 1:00 p.m.•15 views

CVE-2025-6566 oatpp Oat++ Deserializer.cpp deserializeArray stack-based overflow

A vulnerability was found in oatpp Oat++ up to 1.3.1. It has been declared as critical. This vulnerability affects the function deserializeArray of the file src/oatpp/json/Deserializer.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit ha...

6.9CVSS6.4AI score
SaveExploits0References7
CNNVD
CNNVD
•added 2025/06/24 12:00 a.m.•14 views

Oat++ 安全漏洞

Oat++ is a C++ web framework open-sourced by Oat++ for highly scalable and resource efficient web applications. A security vulnerability exists in oatpp Oat++ 1.3.1 and earlier versions, which stems from a stack buffer overflow in the deserializeArray function in Deserializer.cpp...

7.5CVSS5.7AI score0.00799EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/24 12:00 a.m.•3 views

CVE-2025-6566: Stack-based Buffer Overflow

A vulnerability was found in oatpp Oat++ up to 1.3.1. It has been declared as critical. This vulnerability affects the function deserializeArray of the file src/oatpp/json/Deserializer.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit ha...

7.5CVSS5.8AI score0.00799EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
•added 2023/07/09 8:03 p.m.•19 views

invsctx-oat-bnym-uk.fisglobal.com Cross Site Scripting vulnerability OBB-3496203

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
OSV
OSV
•added 2020/07/08 2:15 p.m.•15 views

CVE-2020-5764

MX Player Android App versions prior to v1.24.5, are vulnerable to a directory traversal vulnerability when user is using the MX Transfer feature in "Receive" mode. An attacker can exploit this by connecting to the MX Transfer session as a "sender" and sending a MessageType of "FILELIST" with a...

8.8CVSS7.8AI score0.02037EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2020/07/08 12:00 a.m.•3 views

PT-2020-18685

Name of the Vulnerable Software and Affected Versions MX Player Android App versions prior to v1.24.5 Description The issue allows an attacker to exploit a directory traversal vulnerability when the user is using the MX Transfer feature in "Receive" mode. This can be achieved by sending a...

8.8CVSS0.02037EPSS
SaveExploits1References4
Kitploit
Kitploit
•added 2020/02/01 9:00 p.m.•339 views

GDA Android Reversing Tool - A New Decompiler Written Entirely In C++, So It Does Not Rely On The Java Platform, Which Is Succinct, Portable And Fast, And Supports APK, DEX, ODEX, Oat

Here, a new Dalvik bytecode decompiler, GDA(this project started in 2013 and released its first version 1.0 in 2015 at www.gda.com: 9090 , is proposed and implemented in C++ to provide more sophisticated, fast and convenient decompilation support. GDA is completely self-independent and very stabl...

7.4AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/08/20 12:00 a.m.•4 views

PT-2019-16212

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description A possible file corruption issue exists due to an insecure default value in OatFileAssistant::GenerateOatFile of oat file assistant.cc. This could lead to local escalation of privilege with no...

7.8CVSS0.00173EPSS
SaveExploits0References3
zdt
zdt
•added 2016/12/04 12:00 a.m.•82 views

Android system_server Code Loading Bypass Vulnerability

Exploit for Android platform in category local exploits Android: Code loading bypasses in systemserver As of Android Nougat, a new set of SELinux rules have been added which are designed to prevent systemserver from loading arbitrary code into its address-space. This has been enforced by adding t...

7.2AI score
SaveExploits0
Prion
Prion
•added 2013/08/09 11:55 p.m.•20 views

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Informix Open Admin Tool OAT 2.x and 3.x before 3.11.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

3.5CVSS5.4AI score0.00759EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2013/08/09 11:00 p.m.•34 views

CVE-2013-0492

Cross-site scripting XSS vulnerability in IBM Informix Open Admin Tool OAT 2.x and 3.x before 3.11.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

5.1AI score0.00759EPSS
SaveExploits0References2
CVE
CVE
•added 2013/08/09 11:00 p.m.•50 views

CVE-2013-0492

IBM Informix Open Admin Tool (OAT) suffers an XSS vulnerability (CVE-2013-0492) in OAT 3.11 and earlier. An authenticated user can craft a URL to inject arbitrary script/HTML. Remediation: upgrade to OAT 3.11.1 or later. CVSS base 3.5 (AV:N/AC:M/Au:S/C:N/I:P/A:N).

3.5CVSS5.2AI score0.00759EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2013/08/09 12:00 a.m.•2 views

PT-2013-2383

Name of the Vulnerable Software and Affected Versions IBM Informix Open Admin Tool OAT versions 2.x through 3.11.0 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This enables attackers to execute malicious...

3.5CVSS0.00759EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/09 12:00 a.m.•6 views

CVE-2013-0492: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Informix Open Admin Tool OAT 2.x and 3.x before 3.11.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

3.5CVSS5.9AI score0.00759EPSS
SaveExploits0References2
Prion
Prion
•added 2011/09/06 3:55 p.m.•23 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in IBM OpenAdmin Tool OAT before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the 1 informixserver, 2 host, or 3 port parameter in a login action...

4.3CVSS5.9AI score0.03641EPSS
SaveExploits2References5Affected Software1
Rows per page
Query Builder