CVE-2024-55082

A Server-Side Request Forgery SSRF in the endpoint http://your-server/url-to-pdf of Stirling-PDF 0.35.1 allows attackers to access sensitive information via a crafted request...

CVE-2024-55082

A Server-Side Request Forgery SSRF in the endpoint http://your-server/url-to-pdf of Stirling-PDF 0.35.1 allows attackers to access sensitive information via a crafted request...

CVE-2024-55082

CVE-2024-55082 describes a Server-Side Request Forgery (SSRF) in Stirling-PDF 0.35.1. The vulnerable component is the endpoint http://{your-server}/url-to-pdf, where crafted requests can trigger unauthorized access to sensitive data. Across connected sources, the affected product/stage is consist...

Fortinet FortiManager 操作系统命令注入漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and can group devices into different management domains ADOM to further simplify the deployment and management of multi-device...

CVE-2024-47578

Adobe Document Service allows an attacker with administrator privileges to send a crafted request from a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side...

SAP Adobe Document Service 代码问题漏洞

Adobe Document Service is a service provided by Adobe for processing documents, supporting PDF creation, editing and other functions. A code issue exists in Adobe Document Service that originates from a vulnerability that allows an attacker with administrator privileges to send a specially crafte...

CVE-2024-50947

An issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2024-50947

CVE-2024-50947 concerns kmqtt v0.2.7, where a crafted request can cause a Denial of Service (DoS). Multiple sources (NVD, Red Hat, OSV, CIRCL, CNNVD, CVE lists) corroborate the DoS impact. The documents do not provide root cause details, affected subcomponents, exploit code, or remediation steps....

CVE-2024-50947

An issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2024-50947

An issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service DoS via a crafted request...

KMQTT 安全漏洞

KMQTT is a Kotlin multi-platform MQTT 3.1.1/5.0 client and proxy from the individual developer Davide Pianca. A security vulnerability exists in KMQTT version v0.4.8 that stems from allowing an attacker to cause a denial of service via a crafted request...

CVE-2024-50948

An issue in mochiMQTT v2.6.3 allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2024-50948

mochiMQTT v2.6.3 is vulnerable to Denial of Service DoS due to improper resource management. An attacker can exhaust system memory and crash the broker by establishing and maintaining a large number of malicious, long-term publish/subscribe sessions...

CVE-2024-48080

An issue in aedes v0.51.2 allows attackers to cause a Denial of ServiceDoS via a crafted request. NOTE: the Supplier indicates that exploitation cannot occur because of the protection mechanism in the validateTopic function in lib/utils.js...

gRPC: sensitive information disclosure

A flaw was found in gRPC. This flaw allows a remote attacker to obtain sensitive information, caused by a flaw when the gRPC HTTP2 stack raised a header size exceeded error. By sending a specially crafted request, an attacker can obtain sensitive information, and use this information to launch...

PT-2024-34468 · Mochimqtt · Mochimqtt

Name of the Vulnerable Software and Affected Versions: mochiMQTT version 2.6.3 Description: An issue in mochiMQTT allows attackers to cause a Denial of Service DoS via a crafted request. Recommendations: For mochiMQTT version 2.6.3, at the moment, there is no information about a newer version tha...

aedes 安全漏洞

aedes is an open source graphical user interface GUI based tool from moscajs. A security vulnerability exists in aedes version 0.51.2, which can lead to a denial of service by an attacker with a crafted request...

Zyxel VMG3625-T50B 安全漏洞

The Zyxel VMG3625-T50B is a WiFi device from China Hopkins Zyxel. A security vulnerability exists in Zyxel VMG3625-T50B V5.50 ABPM.9.2 version C0 and earlier versions. An attacker can exploit the vulnerability by sending a specially crafted HTTP POST request to cause the program to deny service...

PT-2024-32986 · Aedes · Aedes

Name of the Vulnerable Software and Affected Versions: aedes version 0.51.2 Description: An issue in aedes allows attackers to cause a Denial of Service DoS via a crafted request. Recommendations: For aedes version 0.51.2, consider restricting access to the service to minimize the risk of...

CVE-2024-50948

mochiMQTT v2.6.3 is vulnerable to Denial of Service DoS due to improper resource management. An attacker can exhaust system memory and crash the broker by establishing and maintaining a large number of malicious, long-term publish/subscribe sessions...