240 matches found
CVE-2022-30292
Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sqreservestack call...
CVE-2022-30292
CVE-2022-30292 affects SQUIRREL 3.2 and earlier; heap-based buffer overflow in sqbaselib.cpp’s thread_call due to missing sq_reservestack. Reported impact includes DoS, with potential sandbox escape and possible arbitrary code execution per linked exploit notes. Exploitation requires crafting Squ...
CVE-2022-30292
Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sqreservestack call...
CVE-2022-30292
Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sqreservestack call...
squirrel 缓冲区错误漏洞
squirrel is the stable version of the programming language SQUIRREL 3.2. A security vulnerability exists in squirrel version 3.2, which stems from the lack of a specific sqreservestack call to threadcall in sqbaselib.cpp. No detailed vulnerability details are currently available...
PT-2022-20051 · Squirrel +1 · Squirrel +1
Name of the Vulnerable Software and Affected Versions: SQUIRREL version 3.2 Description: The issue is a heap-based buffer overflow in sqbaselib.cpp due to the lack of a certain sq reservestack call. This occurs in the thread call function. There is no information provided about the estimated numb...
Threat Source newsletter (Oct. 28, 2021)
Newsletter compiled by Jon Munshaw.Good afternoon, Talos readers. Most people know about chicken and waffles. But what about squirrel and waffles? They may not be the most appetizing brunch, but they are teaming up for one heck of a spam campaign. We have new research out... This is only the...
Squirrel Bug Lets Attackers Execute Code in Games, Cloud Services
An out-of-bounds read vulnerability in the Squirrel programming language lets attackers break out of sandbox restrictions and execute arbitrary code within a Squirrel virtual machine VM, thus giving a malicious actor complete access to the underlying machine. Given where Squirrel lives – in games...
Squirrel Engine Bug Could Let Attackers Hack Games and Cloud Services
Researchers have disclosed an out-of-bounds read vulnerability in the Squirrel programming language that can be abused by attackers to break out of the sandbox restrictions and execute arbitrary code within a SquirrelVM, thus giving a malicious actor complete access to the underlying machine...
Squirrel Sandbox Escape allows Code Execution in Games and Cloud Services
SquirrelLang is an interpreted, open-source programming language that is used by video games and cloud services for customization and plugin development. For example, the extremely popular game Counter-Strike: Global Offensive CS:GO attracts millions of players on a monthly basis and utilizes the...
squirrel-sql-client.10976.n7.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1184711 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Squirrel Run - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Squirrel Run published at the 'play' market has multiple vulnerabilities...
Talking James Squirrel - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Talking James Squirrel published at the 'play' market has multiple vulnerabilities...
WordPress Squirrel Theme 1.6.4 Remote File Inclusion Vulnerability
WordPress Squirrel Theme version 1.6.4 suffers from a remote file inclusion vulnerability. | Title : WP-squirrel 1.6.4 Theme R/L Files Inclusion Download Vulnerability | Author : indoushka | email : email protected | Tested on: windows 8.1 Français V.Pro | Download :...
WordPress Squirrel Theme 1.6.4 Remote File Inclusion
| Title : WP-squirrel 1.6.4 Theme R/L Files Inclusion Download Vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Download : https://wordpress.org/themes/squirrel/ ======================================= poc : requireonce $functionspath...
Microsoft Hotmail or Outlook 0day exploit by squirrel sploit
An 0day exploit in Microsoft Hotmail system was discovered by squirrel sploit and was successively Integer in our software / Caution should read this : English Tutorial : http://www.youtube.com/watch?v=zfsBXz3lmRg French Tutorial : http://www.youtube.com/watch?v=XHGCXajyVA To exploit this...
squirrelmail: not fixed in RHSA-2012:0103
functions/imapgeneral.php in SquirrelMail, as used in Red Hat Enterprise Linux RHEL 4 and 5, does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service disk consumption by making many IMAP login attempts with different usernames, leading to...
SquirrelMail: Server-side code injection in map_yp_alias username map
The mapypalias function in functions/imapgeneral.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program...
Unfixed XSS vulnerability at www.armoredsquirrel.com
Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.armoredsquirrel.com, which at the time of submission ranked 6115670 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. I...
Squirrel Mail 1.2.7 XSS Exploit
Sorry if you receive two of these. DarC KonQuesT XSS Release- Product: Squirrel Mail 1.2.7 - released June 21, 2002 tested, others possibly vulnerable Vendor: Squirrel Mail - Web: www.squirrelmail.org Problem: Cross Site Scripting Severity: Moderate Operating Systems: Tested against Red Hat 7.3,...