CVE-2023-21497

CVE-2023-21497 affects the mPOS TUI trustlet (Samsung devices) prior to SMR May-2023 Release 1. It arises from an externally-controlled format string vulnerability that could allow a local attacker to access memory addresses. Affected component: mPOS TUI trustlet; root cause: format string handli...

hsqldb:SqlStatementFuzzer: Security exception in java.base/sun.nio.cs.CESU_8.newEncoder

Detailed Report: https://oss-fuzz.com/testcase?key=4742737617616896 Project: hsqldb Fuzzing Engine: libFuzzer Fuzz Target: SqlStatementFuzzer Job Type: libfuzzerasanhsqldb Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/sun.nio.cs.CESU8.newEncoder...

Reflected XSS at search_query[] query string

Description Reflected XSS Cross-Site Scripting is a common web security vulnerability that can occur when a user inputs malicious Javascript syntax into the search field. The search function allows users to look for content on the website, and the search keywords are appended to the URL query...

CVE-2023-22923

A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00AARP.14C0 could allow a remote authenticated attacker to cause denial-of-service DoS conditions on an affected device...

CVE-2023-22923

A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00AARP.14C0 could allow a remote authenticated attacker to cause denial-of-service DoS conditions on an affected device...

Format string

A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00AARP.14C0 could allow a remote authenticated attacker to cause denial-of-service DoS conditions on an affected device...

CVE-2023-25492

A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in a web interface API...

Format string

A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in a web interface API...

CVE-2023-25492

A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in a web interface API...

CVE-2023-25492

Lenovo XClarity Controller (XCC) is affected by CVE-2023-25492, a format-string injection vulnerability in the XCC web interface API that could allow a remote authenticated attacker to trigger a denial of service or other undefined behavior. The issue is confirmed across multiple advisories (Red ...

CVE-2023-25492

A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in a web interface API...

CVE-2023-22923

A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00AARP.14C0 could allow a remote authenticated attacker to cause denial-of-service DoS conditions on an affected device...

(Pwn2Own) NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of specific SOAP requests. The issue results from the lack ...

CVE-2023-25492: Use of Externally-Controlled Format String

A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in a web interface API...

PT-2023-20111 · Xcc · Xcc

Name of the Vulnerable Software and Affected Versions: XCC affected versions not specified Description: A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in a web interfa...

Zyxel NBG-418N v2 has a format string error vulnerability

The Zyxel NBG-418N v2 is a wireless router from China Hopkins Zyxel. A security vulnerability exists in the Zyxel NBG-418N v2 firmware versions prior to V1.00. A remote attacker could exploit this vulnerability to cause a denial of service DoS condition on the affected device...

CVE-2023-22923

The CVE-2023-22923 entry concerns a format string vulnerability in the Zyxel NBG-418N v2 firmware. Affected versions are prior to V1.00(AARP.14)C0 . An authenticated remote attacker could trigger a DoS on the device by exploiting uncontrolled format string handling in a binary, as described acros...

CVE-2023-22923

A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00AARP.14C0 could allow a remote authenticated attacker to cause denial-of-service DoS conditions on an affected device...

CVE-2023-22923: Use of Externally-Controlled Format String

A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00AARP.14C0 could allow a remote authenticated attacker to cause denial-of-service DoS conditions on an affected device...

PT-2023-3043 · Triangle Microworks · Scada Data Gateway

Name of the Vulnerable Software and Affected Versions: Triangle MicroWorks' SCADA Data Gateway version = v5.01.03 Description: The issue is related to the use of uncontrolled format strings in the GTWWebMonitor.exe executable file of the SCADA Data Gateway system. An unauthenticated attacker can...