578 matches found
CVE-2024-40084
A Buffer Overflow in the Boa webserver of Vilo 5 Mesh WiFi System = 5.16.1.33 allows remote, unauthenticated attackers to execute arbitrary code via exceptionally long HTTP methods or paths...
AeP (>=0.1.0 <=0.1.3), ApacheLogAnonymizer (>=0.1.0 <=0.1.1) +24237 more potentially affected by unknown CVE via atty (>=0.1.2 <=0.2.14)
atty CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.4 - IMAPServer =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0375...
Intersil (Boa) HTTPd Basic Authentication Password Reset
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Intersil Boa HTTPd Basic Authentication Password Reset', 'Description' = %q The Intersil extension in the Boa HTTP Server 0.93.x - 0.94.11 allows...
CVE-2024-34195
TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function formWlEncrypt, there is a lack of length restriction on the wlanssid field. This oversight leads to potential buffer overflow under specific...
CVE-2024-34198
TOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow. The formWlEncrypt CGI handler in the boa program fails to limit the length of the wlanssid field from user input. This allows attackers to craft malicious HTTP requests by supplying an excessively long...
TOTOLINK AC1200 安全漏洞
TOTOLINK AC1200 is a dual-band Wi-Fi router from China's Gion Electronics TOTOLINK. The TOTOLINK AC1200 suffers from a buffer overflow vulnerability that originates from the formWlEncrypt CGI handler in the boa program that fails to limit the length of the wlanssid field entered by the user. An...
PT-2024-25732 · Totolink · Totolink Ac1200 Wireless Router
Name of the Vulnerable Software and Affected Versions: TOTOLINK AC1200 Wireless Router A3002R Firmware version 1.1.1-B20200824 Description: The issue is related to a Buffer Overflow vulnerability in the boa server program's CGI handling function formWlEncrypt, due to a lack of length restriction ...
CVE-2024-43367
Boa is an embeddable and experimental Javascript engine written in Rust. Starting in version 0.16 and prior to version 0.19.0, a wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Boa's implementation of AsyncGenerator...
CVE-2024-43367 Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects
Boa is an embeddable and experimental Javascript engine written in Rust. Starting in version 0.16 and prior to version 0.19.0, a wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Boa's implementation of AsyncGenerator...
CVE-2024-43367
Boa (Rust) prior to version 0.19.0 had a bug in AsyncGenerator handling where state could incorrectly change while resolving a promise, leading to an uncaught exception. The issue arises when a code path transitions from a getter on the promise’s then property and violates Boa’s assumption that A...
CVE-2024-43367 Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects
Boa is an embeddable and experimental Javascript engine written in Rust. Starting in version 0.16 and prior to version 0.19.0, a wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Boa's implementation of AsyncGenerator...
CVE-2024-43367 Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects
Boa is an embeddable and experimental Javascript engine written in Rust. Starting in version 0.16 and prior to version 0.19.0, a wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Boa's implementation of AsyncGenerator...
Boa 安全漏洞
Boa is a Boa open source open source code for embedded applications. A security vulnerability exists in Boa versions prior to 0.16 through 0.19.0, which stems from a vulnerability that allows an attacker to trigger a state transition in an AsyncGenerator object via carefully constructed code,...
boa_cli (=0.16.0), click_and_load (=0.2.0) +1 more potentially affected by CVE-2024-43357 +1 more via boa_engine (=0.16.0)
boaengine CARGO version =0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on boaengine and may be impacted: - boacli =0.16.0 - clickandload =0.2.0 - zippyst =5.0.0 Source cves: CVE-2024-43357, CVE-2024-43367 Source advisory: OSV:GHSA-F67Q-WR6W-23JQ...
Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects
A wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Details Boa's implementation of AsyncGenerator makes the assumption that the state of an AsyncGenerator object cannot change while resolving a promise created by method...
GHSA-F67Q-WR6W-23JQ Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects
A wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Details Boa's implementation of AsyncGenerator makes the assumption that the state of an AsyncGenerator object cannot change while resolving a promise created by method...
boa_cli (=0.16.0), click_and_load (=0.2.0) +1 more potentially affected by CVE-2024-43357 +1 more via boa_engine (=0.16.0)
boaengine CARGO version =0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on boaengine and may be impacted: - boacli =0.16.0 - clickandload =0.2.0 - zippyst =5.0.0 Source cves: CVE-2024-43357, CVE-2024-43367 Source advisory: OSV:RUSTSEC-2024-0444...
PT-2024-30530 · Boa · Boa
Name of the Vulnerable Software and Affected Versions: Boa versions 0.16 through 0.19.0 Description: A wrong assumption in Boa's implementation of AsyncGenerator can cause an uncaught exception on certain scripts. This occurs because the state of an AsyncGenerator object is assumed not to change...