12934 matches found
curl:curl_fuzzer: Heap-buffer-overflow in Curl_sasl_decode_mech
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6071225397411840 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzer Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address: 0x6060021432b2 Crash State:...
PT-2021-27977
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. The crash state involves functions such as seturl, parseurl, and curl url set. No information is...
curl:curl_fuzzer_tftp: Heap-buffer-overflow in seturl
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6459698847547392 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzertftp Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x607000029ea2 Crash State:...
curl:curl_fuzzer_dict: Heap-buffer-overflow in seturl
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5206884234166272 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzerdict Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x60700002c212 Crash State:...
OSV-2021-1737 Heap-buffer-overflow in Curl_sasl_decode_mech
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42727 Crash type: Heap-buffer-overflow READ 10 Crash state: Curlsasldecodemech Curlsaslparseurlauthoption pop3parseurloptions...
PT-2021-27972
Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the pop3...
PT-2021-27968
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is reported, with a crash type indicating a heap-buffer-overflow READ. The crash state involves functions such as seturl,...
curl:curl_fuzzer: Heap-buffer-overflow in Curl_sasl_decode_mech
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6642157950205952 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzer Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address: 0x6030008f1892 Crash State:...
curl:curl_fuzzer_sftp: Heap-buffer-overflow in seturl
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5908012496191488 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzersftp Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60b000021f14 Crash State:...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4j-RCE Log4j RCE - CVE-2021-44228 !Test Image 1https:/...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
log4j-CVE-2021-44228 On December 5, 2021, Apache identified a...
Amazon Linux 2 : curl (ALAS-2021-1724)
The version of curl installed on the remote host is prior to 7.79.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1724 advisory. A flaw was found in libcurl. When sending data to an MQTT server could in some situations lead to libcurl using already free...
Auerswald COMpact 8.0B - Arbitrary File Disclosure Vulnerability
Exploit Title: Auerswald COMpact 8.0B - Arbitrary File Disclosure Exploit Author: RedTeam Pentesting GmbH Advisory: Auerswald COMpact Arbitrary File Disclosure RedTeam Pentesting discovered a vulnerability in the web-based management interface of the Auerswald COMpact 5500R PBX which allows users...
4-ZERO-3 - 403/401 Bypass Methods + Bash Automation
Introduction 4-ZERO-3 Tool to bypass 403/401. This script contain all the possible techniques to do the same. NOTE : If you see multiple 200 Ok/bypasses as output, you must check the Content-Length. If the content-length is same for multiple 200 Ok/bypasses means false positive. Reason can be...
PT-2021-27916
Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap buffer overflow read. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the smtp parse...
curl:curl_fuzzer: Heap-buffer-overflow in Curl_sasl_decode_mech
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6358065000087552 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzer Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address: 0x60e00002bbff Crash State:...
curl:curl_fuzzer_sftp: Heap-buffer-overflow in junkscan
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6163253873475584 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzersftp Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x607000008fe2 Crash State:...
cURL --ssl-reqd Man-in-the-Middle
The vulnerability of the “--ssl-reqd” command in the software’s interaction with servers via cURL is related to the transmission of data in an open manner. Exploiting this vulnerability allows a remote attacker to carry out “man-in-the-middle” type attacks...
Privilege Escalation
concrete5/concrete5 is vulnerable to privilege escalation. The vulnerability exists in 'bulkupdate.php' because the 'view' permissions granted users in that group can escalate to being an administrator using specially crafted curl...
Improper Privilege Management in Concrete CMS
Privilege escalation from Editor to Admin using Groups in Concrete CMS versions 8.5.6 and below. If a group is granted "view" permissions on the bulkupdate page, then users in that group can escalate to being an administrator with a specially crafted curl. Fixed by adding a check for group...