CVE-2018-16666

An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in nextstring in os/storage/antelope/aql-lexer.c while parsing AQL parsing next string...

CVE-2018-16665

An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow while parsing AQL in lvmshiftforoperator in os/storage/antelope/lvm.c...

CVE-2018-16663

An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in parserelations in os/storage/antelope/aql-parser.c while parsing AQL storage of relations...

CVE-2018-16665

CVE-2018-16665 : Contiki-NG up to 4.1 (and earlier) contains a buffer overflow in parsing AQL within lvm_shift_for_operator in os/storage/antelope/lvm.c . The issue arises from parsing AQL, leading to potential memory corruption. Documented sources cite a denial-of-service impact; no exploits, af...

CVE-2018-16664

An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow in lvmsettype in os/storage/antelope/lvm.c while parsing AQL lvmsetop, lvmsetrelation, lvmsetoperand...

CVE-2018-16666

An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in nextstring in os/storage/antelope/aql-lexer.c while parsing AQL parsing next string...

CVE-2018-16667

An issue was discovered in Contiki-NG through 4.1. There is a buffer over-read in lookup in os/storage/antelope/lvm.c while parsing AQL lvmregistervariable, lvmsetvariablevalue, createintersection, createunion...

CVE-2018-16665

An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow while parsing AQL in lvmshiftforoperator in os/storage/antelope/lvm.c...

CVE-2018-16666

CVE-2018-16666 affects Contiki-NG up to version 4.1, with a stack-based buffer overflow in next_string (os/storage/antelope/aql-lexer.c) during AQL parsing. The CNVD/NVD entries describe an attacker-exploitable condition that can lead to code execution. No patch/version remediation details are pr...

CVE-2018-16667

Contiki-NG up to 4.1 contains a buffer over-read in lookup within os/storage/antelope/lvm.c when parsing AQL (functions lvm_register_variable, lvm_set_variable_value, create_intersection, create_union). Public references describe this as a Contiki-NG 4.1 vulnerability that can lead to a denial of...

webmail.aql.com XSS vulnerability

Vulnerable URL: http://webmail.aql.com/imp/login.php?server=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

aql.com XSS vulnerability

Vulnerable URL: http://www.aql.com/mobile/coverage-checker.php?postcode=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...