79 matches found
sviehb/jefferson vulnerable to path traversal
A vulnerability has been found in the sviehb/jefferson JFFS2 filesystem extraction tool. This vulnerability affects unknown code of the file src/scripts/jefferson. The manipulation leads to path traversal. The attack can be initiated remotely. Upgrading to version 0.4 is able to address this issu...
CVE-2022-4885 sviehb jefferson path traversal
A vulnerability has been found in sviehb jefferson up to 0.3 and classified as critical. This vulnerability affects unknown code of the file src/scripts/jefferson. The manipulation leads to path traversal. The attack can be initiated remotely. The complexity of an attack is rather high. The...
Heap overflow
PDFAlto v0.4 was discovered to contain a heap buffer overflow via the component /pdfalto/src/pdfalto.cc...
ngiflib 缓冲区错误漏洞
ngiflib is a library for decoding the GIF image format written in C. It can be used to decode GIF images. A security vulnerability exists in ngiflib version 0.4, which stems from the fact that GetByte reads a memory buffer without checking the boundaries in ngiflibNOfile mode...
ngiflib 缓冲区错误漏洞
ngiflib is a GIF image format decoding library written in C. A security vulnerability exists in ngiflib version 0.4, which stems from the GetByteStr function in the ngiflib.c file in the NGFLIBNOFILE module that does not check boundaries when copying memory buffers...
ngiflib Buffer Overflow Vulnerability
ngiflib is a GIF image format decoding library written in C language. A buffer overflow vulnerability exists in the WritePixels of the ngiflib.c file in ngiflib version 0.4, which can be exploited by an attacker to cause a buffer overflow or heap overflow...
PT-2019-4686 · Mediawiki · Mediawiki Oauth2 Client Extension
Name of the Vulnerable Software and Affected Versions: MediaWiki OAuth2 Client extension versions prior to 0.4 Description: A CSRF issue exists due to the OAuth2 state parameter not being checked in the callback function, allowing a remote attacker to perform a cross-site request forgery. This...
CVE-2019-1010316
pyxtrlock 0.3 and earlier is affected by: Incorrect Access Control. The impact is: False locking impression when run in a non-X11 session. The fixed version is: 0.4...
CVE-2019-1010316
pyxtrlock 0.3 and earlier is affected by: Incorrect Access Control. The impact is: False locking impression when run in a non-X11 session. The fixed version is: 0.4...
Ogma CMS Cross-Site Request Forgery Vulnerability
Ogma CMS is an XML-based flat file content management system CMS. A cross-site request forgery vulnerability exists in the users.php?action=createnew page in Ogma CMS version 0.4 Beta, which can be exploited by remote attackers to add an administrator account...
MiniUPnP ngiflib Segmentation Error Vulnerability
MiniUPnP is a set of UPnP tools developed by MiniUPnP project that can be used in embedded systems. This tool enables devices in home and corporate networks to connect to each other. ngiflib is one of the GIF image format decoding libraries written in C language. A security vulnerability exists i...
MiniUPnP ngiflib Buffer Overflow Vulnerability
MiniUPnP is a set of UPnP tools developed by MiniUPnP project that can be used in embedded systems. This tool enables devices in home and corporate networks to connect to each other. ngiflib is one of the GIF image format decoding libraries written in C language. A buffer overflow vulnerability...
MiniUPnP ngiflib Buffer Overflow Vulnerability
MiniUPnP is a set of UPnP tools developed by MiniUPnP project that can be used in embedded systems. This tool enables devices in home and corporate networks to connect to each other. ngiflib is one of the GIF image format decoding libraries written in C language. A buffer overflow vulnerability...
MiniUPnP ngiflib Denial of Service Vulnerability
MiniUPnP is a set of UPnP tools developed by MiniUPnP project that can be used in embedded systems. This tool enables devices in home and corporate networks to connect to each other. ngiflib is one of the GIF image format decoding libraries written in C language. A security vulnerability in the...
BES-CMS 0.4/0.5 members/index.inc.php File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The...
Pritlog <= 0.4 (filename) Remote File Disclosure Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog = 0.4: Remote File Edition Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: Printlog $ File affected: index.php $ Version: 0.4 $ Download: http://www.hardkap.net/pritlog Found...
myServer 0.4.x cgi-lib.dll Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8612/info myServer has been reported prone to a remote buffer overflow vulnerability. It is possible to trigger this issue by sending overly long values for URI parameters. Although unconfirmed, this vulnerability may be...
WordPress Plugin Age Verification 0.4 - Open Redirect
WordPress Plugin Age Verification 0.4 - Open Redirect Exploit Title: Wordpress Age Verification plugin = 0.4 Open Redirect Date: 2012/01/10 Dork: inurl:wp-content/plugins/age-verification/age-verification.php Author: Gianluca Brindisi gATbrindi.si @gbrindisi http://brindi.si/g/ Software Link:...
WordPress Plugin Livesig 0.4 - Remote File Inclusion
Exploit Title: Livesig Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/livesig Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link: http://wordpress.org/extend/plugins/livesig/download/ Version: 0.4 tested --- PoC ---...
