Buffer overflow

The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled numplayers value, leading to a buffer overflow. A malicious user can overwrite the server's stack...

UBUNTU-CVE-2020-14983

The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled numplayers value, leading to a buffer overflow. A malicious user can overwrite the server's stack...

CVE-2020-14983

The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled numplayers value, leading to a buffer overflow. A malicious user can overwrite the server's stack...

CVE-2020-14983

The CVE-2020-14983 issue affects Chocolate Doom 3.0.0 (and Crispy Doom 5.8.0 in the report) where the server does not validate the user-controlled num_players value, causing a stack-based buffer overflow. The vulnerability is in the networking code and can lead to server stack overwrite, with the...

CVE-2020-14983

The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled numplayers value, leading to a buffer overflow. A malicious user can overwrite the server's stack...

PT-2020-14107 · Fabien Sanglard +2 · Crispy Doom +2

Name of the Vulnerable Software and Affected Versions: Chocolate Doom version 3.0.0 Crispy Doom version 5.8.0 Description: The issue arises from the server's failure to validate the user-controlled num players value, resulting in a buffer overflow. This allows a malicious user to overwrite the...

chocolate-doom -- Arbitrary code execution

Michal Dardas from LogicalTrust reports: The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled numplayers value, leading to a buffer overflow. A malicious user can overwrite the server's stack...

Chocolate Jewels - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Chocolate Jewels published at the 'play' market has multiple vulnerabilities...

Chocolate recipes - Base64 encoded String, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Chocolate recipes published at the 'play' market has multiple vulnerabilities...

CVE-2014-6906

The Loli Chocolate Cake aka com.alison.kang.chocolatecake application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Loli Chocolate Cake aka com.alison.kang.chocolatecake application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6906

The Loli Chocolate Cake aka com.alison.kang.chocolatecake application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6906

The CVE-2014-6906 entry concerns the Android app Loli Chocolate Cake (com.alison.kang.chocolatecake) 1.0.0, which does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. According to ...

Multiple vulnerabilities in Chocolate WP theme for WordPress

The dt-chocolate WordPress theme was affected by security vulnerability...

dt-chocolate - Image Open redirect

The dt-chocolate WordPress theme was affected by an Image Open redirect security vulnerability...

WordPress DT Chocolate Theme - Image Open redirect

This theme is prone to an image open redirect vulnerability. Solution Update the theme...

WordPress DT Chocolate跨站脚本漏洞

No description provided by source. Exploit: Wordpress Theme DT Chocolate suffers from an xss vulnerability. +P.O.C: 127.0.0.1/PATH/wp-content/themes/dt-chocolate/js/jplayer/Jplayer.swf?jQuery=catcheif!self.aself.a=!alert/TUNISIAN CYBER/// Demo:...

WordPress DT Chocolate Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: WordPress DT Chocolate jplayer.swf Cross Site Scripting vulnerability + Date: 13-01-2014 + Category: WebApp + Google Dork: :inurl:"/wp-content/plugins/nextgen-gallery/" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: Wordpress Theme DT...

Multiple vulnerabilities in Chocolate WP theme for WordPress

Hello 3APA3A! I want to warn you about multiple vulnerabilities in Chocolate WP theme for WordPress. This is commercial theme for WP. These are Cross-Site Scripting, Full path disclosure, Abuse of Functionality, Denial of Service and Arbitrary File Upload vulnerabilities. In 2011 I wrote about...

WordPress Chocolate WP Theme Multiple vulnerabilities

These are Cross-Site Scripting, Full path disclosure, Abuse of Functionality, Denial of Service and Arbitrary File Upload vulnerabilities. Hello list! I want to warn you about multiple vulnerabilities in Chocolate WP theme for WordPress. This is commercial theme for WP. These are Cross-Site...