9896 matches found
PT-2023-15966 · Unknown · Async Http Client
Name of the Vulnerable Software and Affected Versions: Async HTTP Client versions prior to 1.13.2 Description: The issue is related to insufficient validation of HTTP header field values before sending them to the network, allowing attackers to inject new HTTP header fields or entirely new reques...
Deserialization of untrusted data
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-DataCollect service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization...
GHSA-M95X-M25C-W9MP XML-RPC for PHP allows access to local files via malicious argument to the Client::send method
Abusing the $method argument of Client::send, it was possible to force the client to access local files or connect to undesired urls instead of the intended target server's url the one used in the Client constructor. This weakness only affects installations where all the following conditions appl...
PT-2023-33042 · Unknown · Xmlrpc Client
Name of the Vulnerable Software and Affected Versions: xmlrpc Client affected versions not specified Description: The issue allows an attacker to force the client to access local files or connect to undesired URLs instead of the intended target server's URL. This is possible by abusing the $metho...
CVE-2023-21745: Deserialization of Untrusted Data
Microsoft Exchange Server Spoofing Vulnerability...
CVE-2023-21744: Deserialization of Untrusted Data
Microsoft SharePoint Server Remote Code Execution Vulnerability...
CVE-2023-21779: Deserialization of Untrusted Data
Visual Studio Code Remote Code Execution Vulnerability...
bzip2 Denial of Service (DoS)
Working with specific payloads can cause a Denial of Service DoS vector. Both Decompress and Compress implementations can enter into infinite loops given specific payloads entered that trigger it. The issue is described in great detail in the bzip2 repository issue. Thanks to bjrjk for finding an...
RUSTSEC-2023-0004 bzip2 Denial of Service (DoS)
Working with specific payloads can cause a Denial of Service DoS vector. Both Decompress and Compress implementations can enter into infinite loops given specific payloads entered that trigger it. The issue is described in great detail in the bzip2 repository issue. Thanks to bjrjk for finding an...
Deserialization of untrusted data
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames...
PT-2023-18759 · Bzip2 +1 · Bzip2 +1
Name of the Vulnerable Software and Affected Versions: bzip2 crate versions prior to 0.4.4 Description: The issue allows attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. This can lead to a denial of service DoS vector. Both Decompress and Compre...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Used for testing the log4j2 environment. Any issues will be th...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OW...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OW...
Deserialization of untrusted data
The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will cause unauthorized startup of components...
CVE-2021-38241: Deserialization of Untrusted Data
Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework...
Deserialization of untrusted data
Skycaiji v2.5.1 was discovered to contain a deserialization vulnerability via /SkycaijiApp/admin/controller/Mystore.php...
Deserialization of untrusted data
hope-boot 1.0.0 has a deserialization vulnerability that can cause Remote Code Execution RCE...