264 matches found
freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash
An out-of-bounds buffer overflow flaw was found in FreeType prior to version 2.6.1...
D-Link DIR-615 - Privilege Escalation Vulnerability
Exploit for hardware platform in category web applications Exploit Title: D-Link DIR-615 - Privilege Escalation Exploit Author: Sanyam Chawla Vendor Homepage: http://www.dlink.co.in Category: Hardware Wi-fi Router Hardware Link: http://www.dlink.co.in/products/?pid=678 Hardware Version: T1 Firmwa...
D-Link DIR-615 Wireless Router - Persistent Cross-Site Scripting
D-Link DIR-615 Wireless Router - Persistent Cross-Site Scripting Exploit Title: D-Link DIR-615 Wireless Router - Persistent Cross-Site Scripting Date: 2019-12-13 Exploit Author: Sanyam Chawla Vendor Homepage: http://www.dlink.co.in Category: Hardware Wi-fi Router Hardware Link:...
DEBIAN-CVE-2015-9381
FreeType before 2.6.1 has a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c...
openjpeg2: Excessive iteration in openjp2/t1.c:opj_t1_encode_cblks can allow for denial of service via crafted BMP file
In OpenJPEG 2.3.0, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...
OpenJPEG Resource Management Error Vulnerability
OpenJPEG is a C-based open source JPEG2000 codec . A security vulnerability exists in the 'opjt1encodecblks' function in the openjp2/t1.c file in OpenJPEG version 2.3.1. An attacker can exploit this vulnerability to cause a denial of service with a specially crafted bmp file...
ALPINE-CVE-2019-12973
In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...
CVE-2019-12973
In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...
ZyXEL P-660HN-T1 V2 Missing Authentication / Password Disclosure Vulnerabilities
Exploit for hardware platform in category web applications Description: The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 2.00AAKK.3 devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the...
CVE-2019-6725
The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 2.00AAKK.3 devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin...
Design/Logic Flaw
The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 2.00AAKK.3 devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin...
CVE-2019-6725
Summary (CVE-2019-6725): Affected device: ZyXEL P-660HN-T1 V2 with firmware 2.00(AAKK.3). The rpWLANRedirect.asp page is accessible without authentication, allowing an admin password to be read from the HTML source and enabling interface access as admin. This leads to complete control of the mode...
CVE-2019-6725
The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 2.00AAKK.3 devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin...
CVE-2019-6725: Use of Hard-coded Credentials
The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 2.00AAKK.3 devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin...
The vulnerability in the t1_lib.c file of the OpenSSL library allows a hacker to induce a service failure.
The vulnerability in the t1lib.c file of the OpenSSL library is related to resource management errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure by using large OCSP Status Request requests...
Google Titan Security Key Recalled After Bluetooth Pairing Bug
Google is recalling Bluetooth versions of its Titan Security Key after finding a vulnerability that allows attackers in close proximity to take control of the device. Google’s Titan Security Key, launched in the U.S. market last August, is a USB dongle that offers an added layer of security...
cc-t1.ru XSS vulnerability
Open Bug Bounty ID: OBB-679070 Description| Value ---|--- Affected Website:| cc-t1.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
t1.os-data.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-645073 Description| Value ---|--- Affected Website:| t1.os-data.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
t1-production-build.herokuapp.com XSS vulnerability
Open Bug Bounty ID: OBB-623674 Description| Value ---|--- Affected Website:| t1-production-build.herokuapp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6...