Lucene search
+L

508 matches found

CNVD
CNVD
•added 2020/07/22 12:00 a.m.•14 views

GNU LibreDWG Denial of Service Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A security vulnerability exists in the bitcalcCRC of the bits.c file in GNU LibreDWG version 0.9.3 and earlier. An attacker could exploit this vulnerability to cause a denial of service...

6.5CVSS6.7AI score0.01019EPSS
SaveExploits1References1
0daydb
0daydb
•added 2020/05/30 2:52 p.m.•172 views

StreamRipper32 2.6 - Buffer Overflow

StreamRipper32 version 2.6 buffer overflow proof of concept exploit. Exploit Title: StreamRipper32 2.6 - Buffer Overflow PoC Date: 2020-05-14 Exploit Author: Andy Bowden Tested On: Win10 x64 Download Link: http://streamripper.sourceforge.net/sr32/StreamRipper3226.exe Vendor Page:...

9CVSS1.2AI score0.78262EPSS
SaveExploits19
Exploit DB
Exploit DB
•added 2020/05/26 12:00 a.m.•280 views

StreamRipper32 2.6 - Buffer Overflow (PoC)

Exploit Title: StreamRipper32 2.6 - Buffer Overflow PoC Date: 2020-05-14 Exploit Author: Andy Bowden Tested On: Win10 x64 Download Link: http://streamripper.sourceforge.net/sr32/StreamRipper3226.exe Vendor Page: http://streamripper.sourceforge.net/ Version: 2.6 Steps To Reproduce: Double click on...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2020/04/04 12:00 a.m.•144 views

Triologic Media Player 8 Buffer Overflow

Exploit Title: Triologic Media Player 8 - '.m3l' Local Buffer Overflow Unicode SEH Date: 04/04/2020 Author: Felipe Winsnes Software Link: http://download.cnet.com/Triologic-Media-Player/3000-21394-10691520.html Version: 8 Tested on: Windows 7 x86 Proof of Concept: 1.- Run the python script, it wi...

1AI score
SaveExploits0
zdt
zdt
•added 2020/01/27 12:00 a.m.•129 views

Torrent 3GP Converter 1.51 - Stack Overflow (SEH) Exploit

Exploit Title: Torrent 3GP Converter 1.51 - Stack Overflow SEH Exploit Author: boku Software Vendor: torrentrockyou Vendor Homepage: http://www.torrentrockyou.com Software Link: http://www.torrentrockyou.com/download/tr3gpconverter.exe Version: Torrent 3GP Converter Version 1.51 Build 116 Tested...

0.1AI score
SaveExploits0
NVD
NVD
•added 2019/12/06 3:15 p.m.•37 views

CVE-2019-19624

An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsestscale is assumed to be greater than or equal to finestscale within the calc/oclcalc functions in disflow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of t...

6.5CVSS6.3AI score0.01756EPSS
SaveExploits1References3
Prion
Prion
•added 2019/12/06 3:15 p.m.•24 views

Out-of-bounds

An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsestscale is assumed to be greater than or equal to finestscale within the calc/oclcalc functions in disflow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of t...

6.4CVSS6.3AI score0.01756EPSS
SaveExploits1References3Affected Software2
Cvelist
Cvelist
•added 2019/12/06 2:26 p.m.•54 views

CVE-2019-19624

An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsestscale is assumed to be greater than or equal to finestscale within the calc/oclcalc functions in disflow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of t...

6.3AI score0.01756EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/06 12:00 a.m.•2 views

CVE-2019-19624: Out-of-bounds Read

An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsestscale is assumed to be greater than or equal to finestscale within the calc/oclcalc functions in disflow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of t...

6.5CVSS6.3AI score0.01756EPSS
SaveExploits1References2
OSV
OSV
•added 2019/11/20 1:31 a.m.•53 views

GHSA-6G88-VR3V-76MF Eval injection in Supybot/Limnoria

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS10AI score0.02327EPSS
SaveExploits0References9
CNVD
CNVD
•added 2019/11/19 12:00 a.m.•21 views

Limnoria and Supybot Math plugin input validation error vulnerability

Limnoria is a Python IRC Internet Relay Chat bot program, an alternative to Supybot.Math is one of the math plugins. An input validation error vulnerability exists in the Math plugin in versions prior to Limnoria 2019.11.09 and Supybot 2018-05-09 and earlier, which can be exploited by remote...

9.8CVSS6.7AI score0.02327EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2019/11/16 1:15 a.m.•9 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS8.5AI score0.02327EPSS
SaveExploits0References9
PyPA
PyPA
•added 2019/11/16 1:15 a.m.•14 views

PYSEC-2019-102

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS7.8AI score0.02327EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2019/11/16 1:15 a.m.•11 views

UBUNTU-CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS7.3AI score0.02327EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2019/11/16 1:15 a.m.•28 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS7.3AI score0.02327EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/11/16 12:52 a.m.•40 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

10AI score0.02327EPSS
SaveExploits0References5
CVE
CVE
•added 2019/11/16 12:52 a.m.•144 views

CVE-2019-19010

CVE-2019-19010 affects Limnoria (Limnoria/Math plugin) and Supybot, where eval injection in the Math plugin allows remote unauthenticated attackers to disclose information and potentially other impact via the calc and icalc commands. Affected versions include Limnoria before 2019.11.09 and Supybo...

9.8CVSS9.9AI score0.02327EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/16 12:00 a.m.•3 views

CVE-2019-19010: Improper Control of Generation of Code

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS8.2AI score0.02327EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/09/30 12:00 a.m.•34 views

LibreOffice Security Restriction Bypass Vulnerability

LibreOffice is an open source office software suite from The Document Foundation TDF. The product includes applications such as Writer text documents, Calc spreadsheets and Impress presentations. A security vulnerability exists in LibreOffice. An attacker could exploit the vulnerability to bypass...

7.8CVSS8.8AI score0.03081EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/14 12:00 a.m.•4 views

CVE-2019-16305: Improper Neutralization of Special Elements used in a Command

In MobaXterm 11.1 and 12.1, the protocol handler is vulnerable to command injection. A crafted link can trigger a popup asking whether the user wants to run MobaXterm to handle the link. If accepted, another popup appears asking for further confirmation. If this is also accepted, command executio...

8.8CVSS7.9AI score0.06743EPSS
SaveExploits1References2
Rows per page
Query Builder