3549 matches found
Integer overflow
Kilo 0.0.1 has a heap-based buffer overflow because there is an integer overflow in a calculation involving the number of tabs in one row...
CVE-2019-16096
CVE-2019-16096 – Affected software: Kilo 0.0.1. Vulnerability: heap-based buffer overflow caused by an integer overflow in a calculation involving the number of tabs in one row. This description is corroborated by multiple connected sources (Red Hat, CNVD, NVD, CVE listings). Impact and details: ...
Lute-Tab Buffer Overflow Vulnerability
Lute-Tab is a utility program for editing sound scores. A buffer overflow vulnerability exists in Lute-Tab. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write operations bein...
Barq - The AWS Cloud Post Exploitation Framework!
barq: The AWS Cloud Post Exploitation framework! What is it? barq is a post-exploitation framework that allows you to easily perform attacks on a running AWS infrastructure. It allows you to attack running EC2 instances without having the original instance SSH keypairs. It also allows you to...
CVE-2019-15783
Lute-Tab before 2019-08-23 has a buffer overflow in pdfprint.cc...
CVE-2019-15783
Lute-Tab before 2019-08-23 has a buffer overflow in pdfprint.cc...
CVE-2019-15783
Lute-Tab before 2019-08-23 has a buffer overflow in pdfprint.cc...
CVE-2019-15783
Lute-Tab before 2019-08-23 has a buffer overflow in pdfprint.cc...
CVE-2019-15783
CVE-2019-15783 affects Lute-Tab and is linked to a buffer overflow in pdf_print.cc that was present before 2019-08-23. Multiple connected sources corroborate this issue across CVE databases (NVD, Red Hat, CNVD, CVE lists). The NVD entry lists a CVSS 3.0 base score of 9.8 (CRITICAL) with remote ne...
PT-2019-14392
Name of the Vulnerable Software and Affected Versions Lute-Tab versions prior to 2019-08-23 Description The issue is related to a buffer overflow in the pdf print.cc file. Recommendations For versions prior to 2019-08-23, update to a version released after 2019-08-23 to resolve the issue...
CVE-2019-15783: Improper Restriction of Operations within the Bounds of a Memory Buffer
Lute-Tab before 2019-08-23 has a buffer overflow in pdfprint.cc...
CVE-2018-12101
CMS Clipper 1.3.3 has XSS in the Security tab search, User Groups, Resource Groups, and User/Resource Group Links fields...
CVE-2018-12101
CVE-2018-12101 affects CMS Clipper 1.3.3 with cross-site scripting in the Security tab search, User Groups, Resource Groups, and User/Resource Group Links fields. The available documents do not specify the exact vulnerability type (stored vs. reflected), root cause, affected components beyond tho...
CVE-2018-12101: Improper Neutralization of Input During Web Page Generation
CMS Clipper 1.3.3 has XSS in the Security tab search, User Groups, Resource Groups, and User/Resource Group Links fields...
CVE-2017-18506
The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens...
CVE-2017-18506
CVE-2017-18506 affects the WordPress plugin woocommerce-pdf-invoices-packing-slips (before 2.0.13). The vulnerability is an XSS flaw triggered via the tab or section variable on the plugin’s settings screens. Public documentation consistently identifies this as a client-side script execution risk...
CVE-2017-18506: Improper Neutralization of Input During Web Page Generation
The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens...
PT-2019-8441
Name of the Vulnerable Software and Affected Versions woocommerce-pdf-invoices-packing-slips plugin versions prior to 2.0.13 Description The issue allows for XSS via the tab or section variable on settings screens. Recommendations For versions prior to 2.0.13, update to version 2.0.13 or later to...
osTicket 1.12 Formula Injection
Exploit Title: osTicket-v1.12 Formula Injection Vendor Homepage: https://osticket.com/ Software Link: https://osticket.com/download/ Exploit Author: Aishwarya Iyer Contact: https://twitter.com/aish9524 Website: https://about.me/aishiyer Category: webapps CVE: CVE-2019-14749 1. Description An issu...