Lucene search
+L

195 matches found

RedhatCVE
RedhatCVE
•added 2025/08/24 2:30 p.m.•12 views

CVE-2009-10006

UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow vulnerability in its built-in IRC client component. When the client connects to an IRC server and receives a crafted numeric reply specifically a 001 message, the application fails to properly validate the length of...

9.3CVSS7.4AI score0.00867EPSS
SaveExploits2References1
Snyk
Snyk
•added 2025/08/22 2:43 p.m.•12 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow in the IRC client process when handling crafted numeric replies from an IRC server. An attacker can execute arbitrary code by sending a specially crafted 001 message during the automatic IRC connection proces...

9.8CVSS7.7AI score0.00867EPSS
SaveExploits2References2
NVD
NVD
•added 2025/08/22 2:15 p.m.•14 views

CVE-2009-10006

UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow vulnerability in its built-in IRC client component. When the client connects to an IRC server and receives a crafted numeric reply specifically a 001 message, the application fails to properly validate the length of...

9.3CVSS0.00867EPSS
SaveExploits2References6
CVE
CVE
•added 2025/08/22 2:07 p.m.•32 views

CVE-2009-10006

UFO: Alien Invasion (versions up to and including 2.2.1) contains a stack-based buffer overflow in the built-in IRC client component. When the client processes a crafted IRC 001 numeric reply during automatic IRC connection handling, the string length validation can overflow the stack, potentiall...

9.3CVSS7.6AI score0.00867EPSS
SaveExploits2References6
Vulnrichment
Vulnrichment
•added 2025/08/22 2:07 p.m.•10 views

CVE-2009-10006 UFO: Alien Invasion <= 2.2.1 IRC Client Buffer Overflow

UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow vulnerability in its built-in IRC client component. When the client connects to an IRC server and receives a crafted numeric reply specifically a 001 message, the application fails to properly validate the length of...

9.3CVSS7.6AI score0.00867EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies
•added 2025/08/22 12:00 a.m.•18 views

PT-2025-34366 · Unknown · Ufo: Alien Invasion

Name of the Vulnerable Software and Affected Versions: UFO: Alien Invasion versions up to and including 2.2.1 Description: UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow in its built-in IRC client component. When the client connects to an IRC server and receives ...

9.3CVSS7.3AI score0.00867EPSS
SaveExploits2References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•6 views

CVE-2009-10006: Stack-based Buffer Overflow

UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow vulnerability in its built-in IRC client component. When the client connects to an IRC server and receives a crafted numeric reply specifically a 001 message, the application fails to properly validate the length of...

9.3CVSS6.5AI score0.00867EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2025/08/22 12:00 a.m.•17 views

UFO: Alien Invasion 安全漏洞

UFO: Alien Invasion is a game by UFO: Alien Invasion. A security vulnerability exists in UFO: Alien Invasion 2.2.1 and earlier versions, which stems from a buffer overflow in the built-in IRC client component that could lead to the execution of arbitrary code...

9.3CVSS7.2AI score0.00867EPSS
SaveExploits2References8
RedhatCVE
RedhatCVE
•added 2025/05/23 9:49 a.m.•22 views

CVE-2024-7580

A vulnerability was found in Alien Technology ALR-F800 up to 19.10.24.00. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/system.html. The manipulation of the argument uploadedFile with the input ;whoami leads to os command injection. The...

9.8CVSS9.7AI score0.08894EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 11:57 a.m.•28 views

CVE-2024-7578

A vulnerability was found in Alien Technology ALR-F800 up to 19.10.24.00. It has been classified as critical. Affected is an unknown function of the file /var/www/cmd.php. The manipulation of the argument cmd leads to improper authorization. It is possible to launch the attack remotely. The explo...

9.8CVSS6.7AI score0.00824EPSS
SaveExploits1References1
NVD
NVD
•added 2024/08/07 3:15 p.m.•40 views

CVE-2024-7580

A vulnerability was found in Alien Technology ALR-F800 up to 19.10.24.00. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/system.html. The manipulation of the argument uploadedFile with the input ;whoami leads to os command injection. The...

9.8CVSS0.08894EPSS
SaveExploits1References4
OSV
OSV
•added 2024/08/07 3:15 p.m.•17 views

CVE-2024-7580

A vulnerability was found in Alien Technology ALR-F800 up to 19.10.24.00. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/system.html. The manipulation of the argument uploadedFile with the input ;whoami leads to os command injection. The...

9.8CVSS6.3AI score0.08894EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/08/07 2:31 p.m.•64 views

CVE-2024-7580 Alien Technology ALR-F800 system.html os command injection

A vulnerability was found in Alien Technology ALR-F800 up to 19.10.24.00. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/system.html. The manipulation of the argument uploadedFile with the input ;whoami leads to os command injection. The...

6.5CVSS0.08894EPSS
SaveExploits1References4
CVE
CVE
•added 2024/08/07 2:31 p.m.•57 views

CVE-2024-7580

CVE-2024-7580 affects the Alien Technology ALR-F800 firmware up to 19.10.24.00. The vulnerability is a command injection in the /admin/system.html interface, exploitable by manipulating the uploadedFile parameter with the input ";whoami". This can be triggered remotely and the exploit has been di...

9.8CVSS6.8AI score0.08894EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/08/07 2:31 p.m.•24 views

CVE-2024-7580 Alien Technology ALR-F800 system.html os command injection

A vulnerability was found in Alien Technology ALR-F800 up to 19.10.24.00. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/system.html. The manipulation of the argument uploadedFile with the input ;whoami leads to os command injection. The...

6.5CVSS7.5AI score0.08894EPSS
SaveExploits1References4
OSV
OSV
•added 2024/08/07 2:15 p.m.•19 views

CVE-2024-7579

A vulnerability was found in Alien Technology ALR-F800 up to 19.10.24.00. It has been declared as critical. Affected by this vulnerability is the function popen of the file /var/www/cgi-bin/upgrade.cgi of the component File Name Handler. The manipulation of the argument uploadedFile leads to os...

8.8CVSS5.5AI score0.08379EPSS
SaveExploits1References4
NVD
NVD
•added 2024/08/07 2:15 p.m.•39 views

CVE-2024-7579

A vulnerability was found in Alien Technology ALR-F800 up to 19.10.24.00. It has been declared as critical. Affected by this vulnerability is the function popen of the file /var/www/cgi-bin/upgrade.cgi of the component File Name Handler. The manipulation of the argument uploadedFile leads to os...

8.8CVSS0.08379EPSS
SaveExploits1References4
CVE
CVE
•added 2024/08/07 2:00 p.m.•55 views

CVE-2024-7579

An issue affects Alien Technology ALR-F800 up to version 19.10.24.00. The vulnerability resides in the popen call within the File Name Handler component, specifically the /var/www/cgi-bin/upgrade.cgi file, where manipulating the uploadedFile argument leads to an OS command injection. The attack c...

8.8CVSS6.8AI score0.08379EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/08/07 2:00 p.m.•27 views

CVE-2024-7579 Alien Technology ALR-F800 File Name upgrade.cgi popen os command injection

A vulnerability was found in Alien Technology ALR-F800 up to 19.10.24.00. It has been declared as critical. Affected by this vulnerability is the function popen of the file /var/www/cgi-bin/upgrade.cgi of the component File Name Handler. The manipulation of the argument uploadedFile leads to os...

6.5CVSS7.3AI score0.08379EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/08/07 2:00 p.m.•57 views

CVE-2024-7579 Alien Technology ALR-F800 File Name upgrade.cgi popen os command injection

A vulnerability was found in Alien Technology ALR-F800 up to 19.10.24.00. It has been declared as critical. Affected by this vulnerability is the function popen of the file /var/www/cgi-bin/upgrade.cgi of the component File Name Handler. The manipulation of the argument uploadedFile leads to os...

6.5CVSS0.08379EPSS
SaveExploits1References4
Rows per page
Query Builder