607 matches found
CVE-2019-19010
Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...
UBUNTU-CVE-2019-19010
Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...
CVE-2019-19010
Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...
CVE-2019-19010
Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...
CVE-2019-19010
CVE-2019-19010 affects Limnoria (Limnoria/Math plugin) and Supybot, where eval injection in the Math plugin allows remote unauthenticated attackers to disclose information and potentially other impact via the calc and icalc commands. Affected versions include Limnoria before 2019.11.09 and Supybo...
PT-2019-15752
Name of the Vulnerable Software and Affected Versions Limnoria versions prior to 2019.11.09 Supybot versions through 2018-05-09 Description The issue allows remote unprivileged attackers to disclose information or possibly have unspecified other impact. This is achieved via the calc and icalc IRC...
PT-2019-20127
Name of the Vulnerable Software and Affected Versions Limnoria versions prior to 2019.11.09 Supybot versions through 2018-05-09 Description The issue allows remote unprivileged attackers to disclose information or possibly have unspecified other impact. This is achieved via the calc and icalc IRC...
CVE-2019-19010: Improper Control of Generation of Code
Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...
PT-2019-15004
Name of the Vulnerable Software and Affected Versions Arm Mbed OS version 5.14.0 Description An integer overflow was discovered in the CoAP library. The issue arises from the function sn coap builder calc needed packet data size 2, which calculates the required memory for the CoAP message. The...
LibreOffice Security Restriction Bypass Vulnerability
LibreOffice is an open source office software suite from The Document Foundation TDF. The product includes applications such as Writer text documents, Calc spreadsheets and Impress presentations. A security vulnerability exists in LibreOffice. An attacker could exploit the vulnerability to bypass...
CVE-2019-16305: Improper Neutralization of Special Elements used in a Command
In MobaXterm 11.1 and 12.1, the protocol handler is vulnerable to command injection. A crafted link can trigger a popup asking whether the user wants to run MobaXterm to handle the link. If accepted, another popup appears asking for further confirmation. If this is also accepted, command executio...
osTicket 1.12 - Formula Injection
Exploit Title: osTicket-v1.12 Formula Injection Vendor Homepage: https://osticket.com/ Software Link: https://osticket.com/download/ Exploit Author: Aishwarya Iyer Contact: https://twitter.com/aish9524 Website: https://about.me/aishiyer Category: webapps CVE: CVE-2019-14749 1. Description An issu...
CVE-2019-14749: Improper Neutralization of Formula Elements in a CSV File
An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV aka Formula injection exists in the export spreadsheets functionality. These spreadsheets are generated dynamically from unvalidated or unfiltered user input in the Name and Internal Notes fields in the Users tab, and...
OpenCV Out-of-Bounds Read/Write Vulnerability
OpenCV is a cross-platform computer vision library. An out-of-bounds read/write vulnerability exists in the HaarEvaluator::OptFeature::calc function in modules/objdetect/src/cascadedetect.hpp in OpenCV. An attacker could exploit this vulnerability to cause a denial of service...
CVE-2019-14275
Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calcarrow function in bound.c...
UBUNTU-CVE-2019-14275
Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calcarrow function in bound.c...
PT-2019-5480
Name of the Vulnerable Software and Affected Versions Xfig fig2dev version 3.2.7a Description The issue is related to a buffer overflow in the calc arrow function, which can be exploited by an attacker using a specially crafted .fig file, potentially leading to a denial of service. Recommendation...
PT-2019-6432
Name of the Vulnerable Software and Affected Versions OpenCV versions prior to 4.1.1 OpenCV-Python versions prior to 4.1.0.25 Description An out-of-bounds read issue was discovered in the calc and ocl calc functions within the dis flow.cpp component of OpenCV. This occurs because the coarsest sca...
AIDA64 Extreme Edition 5.99.4800 - Local SEH Buffer Overflow Exploit
Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: AIDA64 Extreme 5.99.4800 - SEH Buffer Overflow EggHunter Vendor Homepage: https://www.aida64.com Software Link: http://download.aida64.com/aida64extreme599.exe Mirror Link :...
X-NetStat Pro 5.63 - Local Buffer Overflow
X-NetStat Pro 5.63 - Local Buffer Overflow !/usr/bin/env python --------------------------------------------------------------------------------------------------------- Exploit: X-NetStat Pro 5.63 - Local Buffer Overflow EggHunter Date: 2019-03-23 Author: Peyman Forouzan Tested Against: Winxp SP...