NUUO NVRmini 2 / Crystal / NETGEAR ReadyNAS Surveillance Authenticated Remote Code Execution

The NVRmini 2 Network Video Recorder, Crystal NVR and the ReadyNAS Surveillance application are vulnerable to an authenticated remote code execution on the exposed web administration interface. An administrative account is needed to exploit this vulnerability. This results in code execution as ro...

SAP Crystal Report for Enterprise Remote Code Execution Vulnerability

SAP Crystal Report for Enterprise is a reporting solution. A security vulnerability exists in SAP Crystal Report for Enterprise that could be exploited by a remote attacker to submit a special request to execute arbitrary code...

Magic Crystal Ball by BabyBus - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Magic Crystal Ball by BabyBus published at the 'play' market has multiple vulnerabilities...

Purple Crystal Kika keyboard - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Purple Crystal Kika keyboard published at the 'play' market has multiple vulnerabilities...

crystalballroompdx.com XSS vulnerability

Open Bug Bounty ID: OBB-108159 Description| Value ---|--- Affected Website:| crystalballroompdx.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Crystal Player Playlist File Buffer Overflow Vulnerability

Crystal Player belongs to the shell class of playback software, you can call the Windows MediaPlayer decoder for media playback, it can support all the formats supported by Windows MediaPlayer, but also supports Skin technology. A buffer overflow vulnerability exists in Crystal Player playlist...

Crystal Player 1.99 - Memory Corruption

Crystal Player 1.99 - Memory Corruption Document Title: =============== Crystal Player 1.99 - Memory Corruption Vulnerability Date: ============= 21/01/2015 Vendor Homepage: ================ http://www.crystalreality.com/ Abstract Advisory Information: ============================== Memory...

Crystal Player 1.99 - Memory Corruption Vulnerability

Exploit for windows platform in category dos / poc Document Title: =============== Crystal Player 1.99 - Memory Corruption Vulnerability Date: ============= 21/01/2015 Vendor Homepage: ================ http://www.crystalreality.com/ Abstract Advisory Information: ==============================...

Crystal Player 1.99 - Memory Corruption

Document Title: =============== Crystal Player 1.99 - Memory Corruption Vulnerability Date: ============= 21/01/2015 Vendor Homepage: ================ http://www.crystalreality.com/ Abstract Advisory Information: ============================== Memory Corruption Vulnerability on Crystal Player 1.9...

Bypass 3 6 0 core crystal engine again forced the end of the 3 6 0 process(x64)-vulnerability warning-the black bar safety net

Bypass 3 6 0 core crystal engine again forced the end of the 3 6 0 process, in the face of success, The morning presented a 6 4-bit lower kill360 small toys But it wasn't long before I was hit the face. 3 6 0 say that there is a core crystal engine. We first do not say this T coax coax contraptio...

CVE-2014-5505

Stack-based buffer overflow in SAP Crystal Reports allows remote attackers to execute arbitrary code via a crafted data source string in an RPT file...

CVE-2014-5506

Double free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary code via crafted connection string record in an RPT file...

Double free

Double free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary code via crafted connection string record in an RPT file...

Stack overflow

Stack-based buffer overflow in SAP Crystal Reports allows remote attackers to execute arbitrary code via a crafted data source string in an RPT file...

CVE-2014-5506

Double free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary code via crafted connection string record in an RPT file...

CVE-2014-5505

Stack-based buffer overflow in SAP Crystal Reports allows remote attackers to execute arbitrary code via a crafted data source string in an RPT file...

CVE-2014-5505

CVE-2014-5505 affects SAP Crystal Reports, where a stack-based buffer overflow occurs in the handling of data source strings within RPT files. The root cause is an overflow in processing the DataSource string, enabling remote code execution. The vulnerability is exploitable on vulnerable installa...

CVE-2014-5506

CVE-2014-5506 describes a double free vulnerability in SAP Crystal Reports, specifically in the handling of a connection string record within an RPT file. The flaw allows remote code execution and requires user interaction (the target must visit a malicious page or open a malicious file) to explo...

SAP Crystal Reports Connection String Processing Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Crystal Reports. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling...

SAP Crystal Reports Datasource Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Crystal Reports. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling...