PT-2020-5786

Name of the Vulnerable Software and Affected Versions: Squid versions through 4.7 Description: The issue is related to the ESIExpression::Evaluate function in the Squid proxy server, which is associated with a buffer data boundary overflow. This could allow a remote attacker to access confidentia...

CVE-2019-12519: Out-of-bounds Write

An issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled, Squid calls ESIExpression::Evaluate. This function uses a fixed stack buffer to hold the expression while it's being evaluated. When processing the expression, it could either evaluate the top of the...

CVE-2019-13307

A heap-based buffer overflow was discovered in ImageMagick in the way it parses images when using the evaluate-sequence option. Applications compiled against ImageMagick libraries that accept untrustworthy images and use the evaluate-sequence option or function EvaluateImages may be vulnerable to...

ImageMagick: heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows

A heap-based buffer overflow was discovered in ImageMagick in the way it parses images when using the evaluate-sequence option. Applications compiled against ImageMagick libraries that accept untrustworthy images and use the evaluate-sequence option or function EvaluateImages may be vulnerable to...

PT-2019-13720

Name of the Vulnerable Software and Affected Versions GnuCOBOL version 2.2 Description The issue is related to a buffer overflow in the cb evaluate expr function, located in cobc/field.c, which can be triggered by crafted COBOL source code. Recommendations For GnuCOBOL version 2.2, consider...

CVE-2019-13300

A heap-based buffer overflow was discovered in ImageMagick in the way it applies a value with arithmetic, relational, or logical operators to an image due to mishandling columns. Applications compiled against ImageMagick libraries that accept untrustworthy images and use the evaluate-sequence...

jsonnet/convert_jsonnet_fuzzer: Use-of-uninitialized-value in Interpreter::evaluate

Detailed report: https://oss-fuzz.com/testcase?key=5766210858254336 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzermsanjsonnet Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

UBUNTU-CVE-2019-13307

ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows...

UBUNTU-CVE-2019-13300

ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns...

CVE-2018-16255

There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=evaluate. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in...

CVE-2018-16255: Improper Neutralization of Input During Web Page Generation

There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=evaluate. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in...

PT-2019-9287 · WordPress · Wp All Import

Name of the Vulnerable Software and Affected Versions: WP All Import plugin version 3.4.9 Description: The issue concerns an XSS vulnerability via the action=evaluate endpoint. It is noted that the vendor does not consider this a vulnerability, as the plugin can only be used by a logged-in...

FTW - Framework For Testing WAFs

This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP requests that will trigger these rules...

PT-2018-12684

Name of the Vulnerable Software and Affected Versions btrfsmaintenance versions through 0.4.1 Description An issue in the evaluate auto mountpoint function in btrfsmaintenance-functions allows code execution as root via a specially crafted filesystem label. This can occur when...

Olli Parviainen SoundTouch Denial of Service Vulnerability (CNVD-2018-20560)

Olli Parviainen SoundTouch is an open source audio processing library that is used to configure the speed, pitch, and playback rate of an audio stream or audio file, among other things. A security flaw exists in the 'FIRFilter::evaluateFilterMulti' function of the RateTransposer.cpp file of the...

NodeJS Debugger Command Injection Exploit

This Metasploit module uses the "evaluate" request type of the NodeJS V8 debugger protocol version 1 to evaluate arbitrary JS and call out to other system commands. The port default 5858 is not exposed non-locally in default configurations, but may be exposed either intentionally or via...

PT-2017-13024 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.12.9 Linux kernel versions prior to 4.9 Description: The issue is related to the acpi ns evaluate function in the Linux kernel, which does not properly flush the operand cache. This can cause a kernel stack...

Firefox ESR Code Execution

Mozilla Firefox ESR software contains a vulnerability in the nsJSThunk::EvaluateScript function. Exploiting this vulnerability allows an attacker to execute arbitrary code by manipulating the web notification API component...

emacs -- remote code execution vulnerability

Chong Yidong reports: Paul Ling has found a security flaw in the file-local variables code in GNU Emacs. When the Emacs user option enable-local-variables' is set to :safe' the default value is t, Emacs should automatically refuse to evaluate eval' forms in file-local variable sections. Due to th...

Ani Shell v1.3 Released -- Mail Bomber (with less spam detection) & PHP Decoder

Ani Shell v1.3 Released -- Mail Bomber with less spam detection & PHP Decoder Introduction Ani-Shell is a simple PHP shell with some unique features like Mass Mailer , A simple Web-Server Fuzzer , DDoser, Back Connect , Bind Shell etc etc ! This shell has immense capabilities and have been writte...