CVE-2019-12223: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07190502 devices, and other SRN-x devices before 2019-05-03. A system crash and reboot can be achieved by submitting a long username in excess of 117 characters. The username triggers a buffer overflow in the main process...

Stack Overflow Vulnerability in CenturyStar WebViewer.ocx Control Fl*** Initialization Parameters

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. It is a real-time human-machine interface utility program generator, which consists of CSMaker development system and CSViewer operation system. A stack overflow vulnerability...

Stack Overflow Vulnerability in the Fl*** Method of the CenturyStar WebViewer.ocx Control

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. It is a real-time human-machine interface utility program generator, which consists of CSMaker development system and CSViewer operation system. There is a stack overflow...

PT-2018-10750

Name of the Vulnerable Software and Affected Versions Hanwha Web Viewer version 2.17 Samsung Web Viewer affected versions not specified Description The issue affects the Web Viewer for Hanwha DVR and Smart Viewer in Samsung Web Viewer for Samsung DVR, allowing for XSS attacks. The vulnerability c...

BestSafe Browser - MITM Remote Code Execution Vulnerability

Exploit for Android platform in category remote exploits Exploit Title: BestSafe Browser FREE NoAds - Remote Code Execution Exploit Author: MaXe Vendor Homepage: https://play.google.com/store/apps/details?id=a1.bestsafebrowser.com Software Link: See APK archive websites Screenshot: Refer to...

Debian DSA-3137-1 : websvn - security update

James Clawson discovered that websvn, a web viewer for Subversion repositories, would follow symlinks in a repository when presenting a file for download. An attacker with repository write access could thereby access any file on disk readable by the user the webserver runs as. %NASLMINLEVEL 70300...

r25xss.txt

R25 XSS Vulnerability ===================== Discovered By: Matthew Benenati Release Date: 3/3/2006 Vendor: CollegeNET Versions: /wv3/wv3servlet/urd/run/wvevent.QSearch?searchon=0,findby=1,criteria=%22%3C/div%3E%3Cscript%3Ealertdocument.cookie%3C/script%3E...