Malicious actors could pass in huge arrays to disrupt service availability (DOS) in the updateVotingPower function

Lines of code Vulnerability details Impact The contract is stopped from being usable by legitimate users if the attacker repeatedly spammed large arrays Proof of Concept The updateVotingPower function currently only checks that the array is = 50: While 50 may be a reasonable limit for normal usag...

The vulnerabilities of QTS, QuTS hero, QuTScloud operating systems, QNAP network storage devices, and QVR Pro video management systems are related to uncontrolled resource consumption, allowing attackers to cause service failures.

The vulnerabilities of the QTS, QuTS hero, QuTScloud operating systems, QNAP network storage devices, and the QVR Pro video surveillance system are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions...

Fujitsu Real-time Video Transmission Gear IP series 信任管理问题漏洞

The Fujitsu Real-time Video Transmission Gear IP series is a real-time video transmission device from Fujitsu, Japan. A security vulnerability exists in the Fujitsu Real-time Video Transmission Gear IP series, which stems from a hard-coded credentials vulnerability. An attacker could use this...

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allow a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to an error in the handling of freed memory in browsers with interleaved paging. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the fromDhcpListClient function in the Tenda AC6 router software allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the fromDhcpListClient function in the Tenda AC6 router’s microprogramming system is caused by a buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to trigger a service failure or execute arbitrary code...

CVE-2023-3486

An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage. This could exhaust system resources and prevent the service from operating as expected...

PT-2023-25037 · Papercut · Papercut Ng

Name of the Vulnerable Software and Affected Versions: PaperCut NG versions 22.0.12 and prior Description: An authentication bypass exists that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage. This could exhaust system resources and...

PaperCut NG 代码问题漏洞

PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. PaperCut NG suffers from a security vulnerability that originates from an attacker being able to upload arbitrary files to the file storage of the PaperCut NG host via authentication bypass. This could lea...

The vulnerability of the function `ksmbd_smb2_check_message()` in the file system KSMBD’s `fs/smb/server/smb2misc.c` file allows a attacker to access protected information or cause service failures.

The vulnerability of the ksmbdsmb2checkmessage function in the fs/smb/server/smb2misc.c file of the KSMBD file system in the Linux operating system is related to reading data beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to access protected information or cause...

The vulnerability of the Application Express component in the Oracle Application Express development environment allows access to data modification, addition, deletion, or partial service disruption.

The vulnerability of the Application Express development environment for Oracle Application Express is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to modify, add, or delete data, or cause a partial service...

OpenJDK: ZIP file parsing infinite loop (8302483)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: Utility. Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM...

Format string

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by lacking validation for a specific value when calling cmprocessChangedConfigMsg in ccmprocessREQCHANGEDCONFIG function in AiMesh system. An unauthenticated remote attacker can exploit thi...

CVE-2023-35087 ASUS RT-AX56U V2 & RT-AC86U - Format String - 2

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by lacking validation for a specific value when calling cmprocessChangedConfigMsg in ccmprocessREQCHANGEDCONFIG function in AiMesh system. An unauthenticated remote attacker can exploit thi...

CVE-2023-25835

There is a stored Cross‑Site Scripting XSS vulnerability in Esri Portal for ArcGIS Sites versions 11.1 and below that may allow a remote, authenticated attacker with high‑privileged access to create a crafted link that is persisted within the site configuration. When accessed by a victim, the...

ASUS RT-AX56U 格式化字符串错误漏洞

The ASUS RT-AX56U is a wireless router from Asus China. The ASUS RT-AX56U V2 and RT-AC86U suffer from a Format String Error vulnerability that stems from the presence of a format string vulnerability, which can be exploited by an unauthenticated, remote attacker to perform remote arbitrary code...

Ivanti AntiVirus 缓冲区错误漏洞

Ivanti AntiVirus is an antivirus security software from Ivanti, USA. A security vulnerability exists in Ivanti AntiVirus versions prior to 7.9.1.285, which stems from an out-of-bounds write vulnerability that can be exploited by an unauthenticated, remote attacker to conduct remote arbitrary code...

OpenJDK: ZIP file parsing infinite loop (8302483)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: Utility. Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM...

Design/Logic Flaw

It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability without logging system to upload and run...

CVE-2023-37289 InfoDoc Document On-line Submission and Approval System - Arbitrary File Upload

It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability without logging system to upload and run...

The vulnerability of the d_expression_1 function in the libiberty/cp-demangle.c component of the GNU Binutils development environment allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the dexpression1 function in the libiberty/cp-demangle.c component of the GNU Binutils development environment is related to reading data beyond the allowable buffer limits after multiple recursive calls. Exploiting this vulnerability allows an attacker to gain access to...