Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists in the Kafka dissector, which allows an attacker to cause an application crash through the packet injection or crafted capture file...

Denial Of Service (DoS)

gitlab is vulnerable to Denial of Service DoS attacks. A malicious user is able to prevent access to job logs due to an unhandled exception in job log parsing, which causes the application to crash...

Denial Of Service (DoS)

gpac is vulnerable to Denial of Service DoS attacks. A malicious user is able to cause an application crash due to uncontrolled recursion...

Denial Of Service (DoS)

qemu is vulnerable to Denial of Service DoS attacks. The flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and an application crash...

Google Chrome Code Execution Vulnerability (CNVD-2023-63464)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is caused by use after release in Blink Task Scheduling. An attacker can exploit this vulnerability to execute arbitrary code on the system or cause an application to...

Google Chrome Code Execution Vulnerability (CNVD-2023-63501)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is due to an out-of-bounds memory access in ANGLE. An attacker can exploit this vulnerability to execute arbitrary code on a system or cause an application to crash...

Google Chrome Code Execution Vulnerability (CNVD-2023-63465)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that stems from a data validation deficiency in Extensions. An attacker can exploit this vulnerability to execute arbitrary code on a system or cause an application to crash...

Google Chrome Code Execution Vulnerability (CNVD-2023-63471)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that stems from a mal-execution issue in Extensions. An attacker could exploit this vulnerability to execute arbitrary code on a system or cause an application to crash...

Google Chrome Code Execution Vulnerability (CNVD-2023-63469)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is due to a free use after in Cast. An attacker can exploit the vulnerability to execute arbitrary code on a system or cause an application to crash...

Google Chrome Code Execution Vulnerability (CNVD-2023-63502)

Google Chrome is a web browser of Google Google, U.S. V8 is one of the open source JavaScript engine. Google Chrome suffers from a code execution vulnerability that is due to type obfuscation in V8. An attacker can exploit this vulnerability to execute arbitrary code on a system or cause an...

Denial Of Service (DoS)

golang.org/x/image is vulnerable to Denial of Service DoS. The vulnerability exists when reader.go parses a tiled tiff image with a height of 0, and has a very large width which results in excessive CPU consumption while decoding, possibly allowing an attacker to cause an application crash or...

WordPress adivaha Travel Plugin 2.3 - SQL Injection

Exploit Title: WordPress adivaha Travel Plugin 2.3 - SQL Injection Exploit Author: CraCkEr Date: 29/07/2023 Vendor: adivaha - Travel Tech Company Vendor Homepage: https://www.adivaha.com/ Software Link: https://wordpress.org/plugins/adiaha-hotel/ Demo: https://www.adivaha.com/demo/adivaha-online/...

CVE-2020-20703

A use-after-free flaw was found in Vim. This issue allows a heap buffer overflow leading to a write access violation. This flaw allows the attacker to possibly have control over the write address and value, which may lead to an application crash. Mitigation Untrusted vim scripts with -s scriptin...

Out-of-Bounds Write

libopenbabel.so is vulnerable to Out-of-Bounds Write. The vulnerability exists in the Gaussian file format in the ReadMolecule function of gaussformat.cpp, which allows an attacker to inject and execute malicious code, causing an application to crash by providing a maliciously crafted file...

SUSE CVE-2021-46666

MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause...

WordPress Adivaha Travel 2.3 SQL Injection

Exploit Title: WordPress adivaha Travel Plugin 2.3 - SQL Injection Exploit Author: CraCkEr Date: 29/07/2023 Vendor: adivaha - Travel Tech Company Vendor Homepage: https://www.adivaha.com/ Software Link: https://wordpress.org/plugins/adiaha-hotel/ Demo: https://www.adivaha.com/demo/adivaha-online/...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that stems from a data validation deficiency in Extensions. An attacker can exploit this vulnerability to execute arbitrary code on a system or cause an application to crash...

Out-of-Bounds Write

libopenbabel.so is vulnerable to Out-of-Bounds Write. The vulnerability exists in the Gaussian file format in the ReadMolecule function of mopacformat.cpp, which allows an attacker to inject and execute malicious code, causing an application to crash by providing a maliciously crafted file...

EulerOS Virtualization 2.9.0 : binutils (EulerOS-SA-2023-2522)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Field thebfd of asymbol is uninitialized in function bfdmachogetsyntheticsymtab.CVE-2023-25588 A flaw was found in binutils, where...

Denial Of Service (DoS)

paddlepaddle is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap buffer overflow in the MatrixPowerInferMeta function of unary.cc, which allows an attacker to crash the application...