641523 matches found
Vehicle-Service-Management-System-Mechanic-List-Stored-Cross-Site-Scripting-XSS
CVE-2021-46069 Título del Exploit: Vehicle Service Management System - 'Mechanic List' Cross Site Scripting XSS Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIO Referencias:...
Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS
CVE-2021-46080 漏洞利用标题：车辆服务管理系统 - “多个”跨站请求伪造（CSRF）导致存储型跨站脚本（XSS） 漏洞利用作者：SANU P.L CVE：CVE-2021-46080 CVSS：4.8 中危 参考链接： https://www.plsanu.com/vehicle-service-management-system-multiple-cross-site-request-forgery-csrf-leads-to-stored-cross-site-scripting-xss...
cve-2025-29384-poc
CVE-2025-29384 概念验证漏洞利用程序 概述 本仓库包含针对 CVE-2025-29384 的高级概念验证（PoC）漏洞利用程序，这是一个严重的基于栈的缓冲区溢出 漏洞，发现于运行固件版本 V15.03.05.14multi 的 Tenda AC9 路由器中。该漏洞允许未经认证的远程攻击者 使路由器的 Web 服务器崩溃（拒绝服务，DoS ），并有可能执行任意代码（远程代码执行，RCE ）。 本项目的目的是展示漏洞利用开发技能 ，为网络安全社区做出贡献，并为学术评估（例如网络安全奖学金）提供教学展示。 本仓库包含针对 CVE-2025-29384...
USN-8704-1 cpio vulnerabilities
It was discovered that cpio incorrectly sanitized hard-link targets when extracting tar archives in copy-in mode. If a user or automated system were tricked into extracting a specially crafted tar archive, an attacker could possibly use this issue to create hard links to files outside the...
FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses
A vulnerability in FreeRDP allows a malicious RD Gateway to bypass client-side size limits by sending oversized chunked HTTP responses. This exhausts the client's memory, resulting in a Denial of Service DoS...
FreeRDP: FreeRDP: Denial of Service and heap corruption via malformed RDP audio PDU
A flaw was found in FreeRDP. An authenticated Remote Desktop Protocol RDP client can send a specially crafted Client Audio Formats Protocol Data Unit PDU to the server. This malformed PDU can cause a double-free vulnerability in the rdpsndserverrecvformats function, leading to the server reliably...
FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests
A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...
FreeRDP: FreeRDP: Denial of Service via null pointer dereference in smartcard cleanup
A null pointer dereference flaw in FreeRDP allows a remote attacker to cause a denial of service DoS via specially crafted smartcard requests. If reader-state decoding fails, the system attempts to free uninitialized states during cleanup, resulting in a process crash...
FreeRDP: FreeRDP: Denial of Service due to RDPEI message processing
A flaw was found in FreeRDP. A remote attacker can exploit a vulnerability in the Remote Desktop Protocol RDP Enhanced Input RDPEI server channel handler. By sending a malicious RDPEI message with an oversized declared body length, the attacker can force the server to allocate excessive memory,...
FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read
A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...
FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service and information disclosure
A flaw was found in FreeRDP, an implementation of the Remote Desktop Protocol. A malicious RDP server can exploit an out-of-bounds read vulnerability by sending a malformed planar bitmap or surface update. This causes the client's decoder to read beyond its allocated buffer, which can lead to a...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling
A flaw was found in FreeRDP. A remote attacker, by sending a specially crafted Remote Desktop Protocol RDP packet, could trigger a heap buffer overflow in the server-side RAIL channel handler. This vulnerability, caused by an integer underflow, allows the attacker to corrupt memory and crash the...
FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders
A flaw was found in FreeRDP. When the async-update feature is enabled, a malicious or compromised Remote Desktop Protocol RDP server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to...
FreeRDP: FreeRDP: Out-of-bounds memory access in Kerberos decryption
A flaw in FreeRDP's Kerberos implementation allows a malicious RDP peer to cause an out-of-bounds memory access by providing an unbounded GSS Wrap-token EC field. This occurs during CredSSP/NLA decryption and can lead to a denial of service or information disclosure...
FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders
A flaw was found in FreeRDP. When the async-update feature is enabled, a malicious or compromised Remote Desktop Protocol RDP server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to...
FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read
A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...
FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests
A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
CVE-2022-22274_CVE-2023-0656
SonicWall NGFW CVE-2022-22274 & CVE-2023-0656 2022年3月24日、SonicWallは以下の詳細を含む勧告を公開しました。 SonicOSのHTTPリクエストを介したスタックベースのバッファオーバーフローの脆弱性により、リモートの未認証攻撃者がサービス拒否（DoS）を引き起こしたり、ファイアウォールでのコード実行に至る可能性があります。 注：この脆弱性は「Web管理」インターフェースにのみ影響し、SonicOS SSLVPNインターフェースには影響しません。 2023年3月2日、SonicWallは別の同様の勧告を公開しました。...