74 matches found
ALPINE-CVE-2025-54349
In iperf before 3.19.1, iperfauth.c has an off-by-one error and resultant heap-based buffer overflow...
UBUNTU-CVE-2025-54349
In iperf before 3.19.1, iperfauth.c has an off-by-one error and resultant heap-based buffer overflow...
Mist 安全漏洞
Mist is an open source multi-cloud management platform from Mist, Inc. in the United States. Mist has a security vulnerability that originates from improper access control in the function createtoken in the file src/mist/api/auth/views.py...
CVE-2025-24343
A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to write arbitrary files in arbitrary file system paths via a crafted HTTP request...
BIT-MEMCACHED-2021-37519
Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted authenticattion file...
FunAdmin SQL注入漏洞
FunAdmin is FunAdmin open source a lightweight and high-color backend development system based on ThinkPHP6+Layui development. A security vulnerability exists in FunAdmin version 5.0.2, which stems from a SQL injection vulnerability in the selectFields parameter of the index method of...
ROS-20240412-01
Vulnerability of authfile.c file of memcached data caching software is related to buffer overflow in dynamic memory. buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker to cause a denial of denial of service using a specially crafted authentication file...
NetentSec NS-ASG 安全漏洞
NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /include/authrp.php file...
CXBSoft Post-Office SQL Injection Vulnerability
CXBSoft Post-Office is a post office system from CXBSoft. A SQL injection vulnerability exists in CXBSoft Post-Office 1.0 and earlier versions, which originates from a SQL injection vulnerability in the parameter usernamelogin in the file /apps/loginauth.php...
PT-2024-15642 · Cxbsoft · Cxbsoft Post-Office
Name of the Vulnerable Software and Affected Versions: CXBSoft Post-Office versions up to 1.0 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically in the /apps/login auth.php file. The manipulation of the username login argument leads to SQL...
Matrimonial Site SQL Injection Vulnerability
Matrimonial Site is a dating website. The code-projects Matrimonial Site version 1.0 has a SQL injection vulnerability that originates from a SQL injection vulnerability in the file /auth/auth.php...
The vulnerability of the authfile.c file in the memcached data caching software allows a hacker to induce a service failure.
The vulnerability of the authfile.c file in the memcached data caching software is related to buffer overflows in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure by using a specially created authentication file...
PT-2023-18248 · Unknown · Shannon Baseband
Name of the Vulnerable Software and Affected Versions: Shannon baseband versions prior to SMR May-2023 Release 1 Description: The issue is related to a potential buffer overflow vulnerability in the auth API, specifically in the mm Authentication.c file. This could allow remote attackers to cause...
The authfile directive in the booth config file is ignored preventing use of authentication in communications from node to node. As a result nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.
...
Denial Of Service (DoS)
memcached is vulnerable to Denial Of Service DoS. The vulnerability exists due to the buffer overflow in the authfile.c, which allows an attacker to cause an application crash through the crafted authentication file...
SUSE CVE-2016-10011
authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process...
SUSE CVE-2021-37519
Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted authenticattion file...
CVE-2021-37519
Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted authenticattion file...