PT-2018-3751

Name of the Vulnerable Software and Affected Versions NoneCms version 1.3 Description An issue in thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter. This is demonstrated by the query string...

TP-Link TL-R600VPN HTTP Server Buffer Overflow Vulnerability (CNVD-2018-23626)

The TP-Link TL-R600VPN is an enterprise router from China P&L TP-LINK. the HTTP Server is one of the HTTP servers. A buffer overflow vulnerability exists in the HTTP Server in TP-Link TL-R600VPN HWv3 FRNv1.3.0 version and HWv2 FRNv1.2.3 version. An attacker can exploit the vulnerability to execut...

Unspecified vulnerability in libIEC61850 (CNVD-2019-43857)

libIEC61850 is an open source library for IEC 61850. A security vulnerability exists in the 'EthernetreceivePacket' function of the ethernetbsd.c file in libIEC61850 version 1.3. No details of the vulnerability are provided at this time...

libIEC61850 Denial of Service Vulnerability

libIEC61850 is an open source library for IEC 61850. A denial of service vulnerability exists in the 'EthernetsendPacket' function of the ethernetbsd.c file in libIEC61850 version 1.3, which can be exploited by an attacker to cause a denial of service null pointer backreference...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in EthernetsendPacket in ethernetbsd.c. Remediation There is no fixed version for libiec61850. References - Github.com - GitHub Issu...

PT-2018-14805 · Unknown · Libiec61850

Name of the Vulnerable Software and Affected Versions: libIEC61850 version 1.3 Description: A issue has been found in the software, which is a SEGV in ControlObjectClient setCommandTerminationHandler in client/client control.c. This issue is disputed by the software maintainer as it requires...

libIEC61850 Null Pointer Dereference Vulnerability

libIEC61850 is an open source GPLv3 implementation of the IEC 61850 client and server libraries. A null pointer dereference vulnerability exists in ClientDataSetgetValues in client/iedconnection.c in libIEC61850 1.3, which can be exploited by an attacker to cause a denial of service null pointer...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSetgetValues in client/iedconnection.c. Remediation There is no fixed version for libiec61850. References - Github.com ...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write. An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. Remediation There is no fixed version for libiec61850. References - Github.com...

Unspecified vulnerability in BHIM application for Android (CNVD-2019-41447)

BHIM application for Android is an Android platform based mobile payment application by National Payments India. A security vulnerability exists in the National Payments Corporation in version 1.3 of the India BHIM application for Android-based platform, which stems from the program's reliance on...

Unspecified vulnerability in BHIM application for Android (CNVD-2019-41446)

BHIM application for Android is an Android platform based mobile payment application by National Payments India. A security vulnerability exists in National Payments Corporation in version 1.3 of the India BHIM application for Android-based platform. An attacker can exploit the vulnerability to...

Unspecified vulnerability in BHIM application for Android (CNVD-2019-41445)

BHIM application for Android is an Android platform based mobile payment application by National Payments India. A security vulnerability exists in National Payments Corporation in version 1.3 of the India BHIM application for Android-based platform, which stems from the program not properly...

CVE-2017-9818

The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attackers to obtain access...

valeuraddons German Spelling Dictionary Cross-Site Scripting Vulnerability

valeuraddons German Spelling Dictionary is a German spelling dictionary application. The program is mainly used to check German spelling mistakes. A cross-site scripting vulnerability exists in valeuraddons German Spelling Dictionary version 1.3. A remote attacker can exploit this vulnerability t...

EasyCMS Cross-Site Request Forgery Vulnerability

EasyCMS is a scalable lightweight open source content management system CMS written in PHP. A cross-site request forgery vulnerability exists in EasyCMS version 1.3. A remote attacker can exploit this vulnerability to delete users with the help of index.php?s=/admin/user/delAll URI...

Xxe

beep version 1.3 and up contains a External Control of File Name or Path vulnerability in --device option that can result in Local unprivileged user can inhibit execution of arbitrary programs by other users, allowing DoS. This attack appear to be exploitable via The system must allow local users...

EasyCMS Cross-Site Scripting Vulnerability (CNVD-2018-08985)

EasyCMS is a lightweight scalable open source content management system CMS written in PHP. A cross-site scripting vulnerability exists in EasyCMS version 1.3. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the title, keyword, abstract and content...

MyScript SDK for Android Deserialization Code Execution Vulnerability

MyScript SDK for Android is a software development kit for MyScript handwriting input recognition engine based on Android platform. A security vulnerability exists in versions of MyScript SDK for Android prior to version 1.3. The vulnerability can be exploited to execute arbitrary code via the...

WordPress Gratifikasi Plugin Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in version 1.3 of the WordPress Gratifikasi plugin, which can be exploited by an...

Vehicle Sales Management System - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: VSMS Multiple Vulnerabilities Google Dork: N/A Date: 16-3-2018 Exploit Author: Sing Vendor Homepage: https://sourceforge.net/projects/vsms-php/?source=typredirect Software Link:...