24 matches found
EUVD-2025-19006
Malicious code in bioql PyPI...
CVE-2025-6566
A vulnerability was found in oatpp Oat++ up to 1.3.1. It has been declared as critical. This vulnerability affects the function deserializeArray of the file src/oatpp/json/Deserializer.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit ha...
CVE-2025-6566
A vulnerability was found in oatpp Oat++ up to 1.3.1. It has been declared as critical. This vulnerability affects the function deserializeArray of the file src/oatpp/json/Deserializer.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit ha...
CVE-2025-6566
CVE-2025-6566 affects oatpp Oat++ up to 1.3.1. The vulnerability resides in deserializeArray() in Deserializer.cpp and causes a stack-based buffer overflow. It can be triggered remotely, and the exploit has been publicly disclosed. Multiple sources corroborate the issue across CVE feeds and advis...
CVE-2025-6566 oatpp Oat++ Deserializer.cpp deserializeArray stack-based overflow
A vulnerability was found in oatpp Oat++ up to 1.3.1. It has been declared as critical. This vulnerability affects the function deserializeArray of the file src/oatpp/json/Deserializer.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit ha...
CVE-2025-6566 oatpp Oat++ Deserializer.cpp deserializeArray stack-based overflow
A vulnerability was found in oatpp Oat++ up to 1.3.1. It has been declared as critical. This vulnerability affects the function deserializeArray of the file src/oatpp/json/Deserializer.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit ha...
Oat++ 安全漏洞
Oat++ is a C++ web framework open-sourced by Oat++ for highly scalable and resource efficient web applications. A security vulnerability exists in oatpp Oat++ 1.3.1 and earlier versions, which stems from a stack buffer overflow in the deserializeArray function in Deserializer.cpp...
CVE-2025-6566: Stack-based Buffer Overflow
A vulnerability was found in oatpp Oat++ up to 1.3.1. It has been declared as critical. This vulnerability affects the function deserializeArray of the file src/oatpp/json/Deserializer.cpp. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit ha...
invsctx-oat-bnym-uk.fisglobal.com Cross Site Scripting vulnerability OBB-3496203
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2020-5764
MX Player Android App versions prior to v1.24.5, are vulnerable to a directory traversal vulnerability when user is using the MX Transfer feature in "Receive" mode. An attacker can exploit this by connecting to the MX Transfer session as a "sender" and sending a MessageType of "FILELIST" with a...
PT-2020-18685
Name of the Vulnerable Software and Affected Versions MX Player Android App versions prior to v1.24.5 Description The issue allows an attacker to exploit a directory traversal vulnerability when the user is using the MX Transfer feature in "Receive" mode. This can be achieved by sending a...
GDA Android Reversing Tool - A New Decompiler Written Entirely In C++, So It Does Not Rely On The Java Platform, Which Is Succinct, Portable And Fast, And Supports APK, DEX, ODEX, Oat
Here, a new Dalvik bytecode decompiler, GDA(this project started in 2013 and released its first version 1.0 in 2015 at www.gda.com: 9090 , is proposed and implemented in C++ to provide more sophisticated, fast and convenient decompilation support. GDA is completely self-independent and very stabl...
PT-2019-16212
Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description A possible file corruption issue exists due to an insecure default value in OatFileAssistant::GenerateOatFile of oat file assistant.cc. This could lead to local escalation of privilege with no...
Android system_server Code Loading Bypass Vulnerability
Exploit for Android platform in category local exploits Android: Code loading bypasses in systemserver As of Android Nougat, a new set of SELinux rules have been added which are designed to prevent systemserver from loading arbitrary code into its address-space. This has been enforced by adding t...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Informix Open Admin Tool OAT 2.x and 3.x before 3.11.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2013-0492
Cross-site scripting XSS vulnerability in IBM Informix Open Admin Tool OAT 2.x and 3.x before 3.11.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2013-0492
IBM Informix Open Admin Tool (OAT) suffers an XSS vulnerability (CVE-2013-0492) in OAT 3.11 and earlier. An authenticated user can craft a URL to inject arbitrary script/HTML. Remediation: upgrade to OAT 3.11.1 or later. CVSS base 3.5 (AV:N/AC:M/Au:S/C:N/I:P/A:N).
PT-2013-2383
Name of the Vulnerable Software and Affected Versions IBM Informix Open Admin Tool OAT versions 2.x through 3.11.0 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This enables attackers to execute malicious...
CVE-2013-0492: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM Informix Open Admin Tool OAT 2.x and 3.x before 3.11.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in IBM OpenAdmin Tool OAT before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the 1 informixserver, 2 host, or 3 port parameter in a login action...