Denial Of Service (DoS)

gitlab is vulnerable to Denial Of Service DoS. The vulnerability exists because the attacker can add maliciously crafted content to the library's description section, leading to high CPU usage and crashing the application...

Denial Of Service (DoS)

github.com/elazarl/goproxy is vulnerable to Denial Of Service DoS. The vulnerability exists in the handleHttps function of https.go when the proxy is in MITM mode due to not properly validating the host URLs, which allows an attacker to cause an application crash when a HTTP request goes to HTTPS...

Launch failure with CDViewer.exe crash on kernelbase.dll .Net Runtime with Workspace App 2305

Launching a published app or desktop using Workspace App for Windows version 2305.0 23.5.0 might fail with the following error seen in the Application event logs of the affected client, Exception 1 : CDViewer.exe ... System.Runtime.InteropServices.COMException ... Exception 2 : Failing applicatio...

SUSE SLES12 Security Update : poppler (SUSE-SU-2023:2906-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2906-1 advisory. - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service bsc1199272. - CVE-2018-21009:...

Denial Of Service (DoS)

keylime is vulnerable to Denial Of Service DoS. The vulnerability exists because the Registrar gets blocked after opening a single connection to its HTTPS interface which allows an attacker to cause an application crash...

Denial Of Service (DoS)

libjpeg.so is vulnerable to Denial Of Service DoS. The vulnerability exists because of a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp which allows an attacker to cause an application crash...

Denial Of Service (DoS)

libnghttp2.so is vulnerable to a memory leak. The vulnerability exists when the PUSHPROMISE or a HEADERS frame cannot be successfully sent, which can result in nghttp2onstreamclosecallback failing with a fatal error. If the server is under intensive memory operation an attacker could potentially...

Denial Of Service (DoS)

github.com/hamba/avro is vulnerable to Denial Of Service DoS. The vulnerability exists in the ReadString function of reader.go because config.go does not properly restrict the maximum size of bytes and string types, allowing an attacker to cause an application crash by providing a maliciously...

Denial Of Service (DoS)

FastAsyncWorldEdit is vulnerable to Denial Of Service. The vulnerability exists due to the lack of validation of user access traffic, which allows an attacker to cause an application crash by providing a maliciously crafted input...

EulerOS 2.0 SP10 : binutils (EulerOS-SA-2023-2347)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Field thebfd of asymbol is uninitialized in function bfdmachogetsyntheticsymtabCVE-2023-25588 A flaw was found in binutils, where there is a NULL...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the segmentation fault in the isomread.c and isomwrite.c files, which allows an attacker to cause an application crash by providing a malicious input...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to a segmentation fault in the gfsgvrmlissffield function of vrmltools.c, which allows an attacker to cause an application crash by providing a malicious input...

Carlisting 1.6 SQL Injection

Exploit Title: Carlisting 1.6 - SQL Injection Exploit Author: CraCkEr Date: 16/07/2023 Vendor: phpscriptpoint Vendor Homepage: https://phpscriptpoint.com/ Software Link: https://demo.phpscriptpoint.com/carlisting/ Tested on: Windows 10 Pro Impact: Database Access Description SQL injection attacks...

RecipePoint 1.9 SQL Injection

Exploit Title: RecipePoint 1.9 - SQL Injection Exploit Author: CraCkEr Date: 15/07/2023 Vendor: phpscriptpoint Vendor Homepage: https://phpscriptpoint.com/ Software Link: https://demo.phpscriptpoint.com/recipepoint/ Tested on: Windows 10 Pro Impact: Database Access Description SQL injection attac...

Regular Expression Denial Of Service (ReDoS)

apacheairflow is vulnerable to Regular expression Denial of Service ReDoS. The vulnerability exists in the partialsubset function at dag.py due to not validating user input regex efficiently which allows an attacker to send a crafted input causing an application crash...

Denial Of Service (DoS)

github.com/malfunkt/iprange is vulnerable to Denial of Service DoS attacks. The vulnerability exists in Parse function of y.go, which allows a malicious user to parse a range with a mask larger than 32 bits which causes a panic, resulting in an application crash...

Connection Termination

grpc is vulnerable to Connection Termination. An attacker can terminate the connection between a HTTP2 proxy and the gRPC server by providing a -bin suffixed headers, which leads to a base64 encoding error, causing an application crash...

NULL Pointer Dereference

libpano13.so is vulnerable to NULL Pointer Dereference. The vulnerability exists in the panoParserFindOLine function at parser.c which allows an attacker to execute arbitrary codes via a crafted file when can cause the application to crash...

Denial Of Service (DoS)

libsox.so is vulnerable to Denial Of Service DoS. The vulnerability exists in readsamples function at voc.c due to a floating point exception which allows an attacker to cause an application crash...

Denial Of Service (DoS)

grpc is vulnerable to Denial Of Service DoS. The vulnerability exists due to improper header validation which allows an attacker to send headers such as te: x x != trailers, scheme: x x != http, https, and grpclbclientstats: x x == anything, leading to the total header size being over 8kb,...