2393 matches found
Libec_Iccp_Mod buffer error vulnerability
LibiecIccpMod is used to modify Libiec6850 Mms to use the Iccp client. A buffer error vulnerability exists in LibiecIccpMod v1.5, which stems from the software containing a heap buffer overflow component, MMSclientexample1.c. The vulnerability is caused by the following...
Libiec_Iccp_Mod security vulnerability
LibiecIccpMod is used to modify Libiec6850 Mms to use the Iccp client. A security vulnerability exists in LibiecIccpMod v1.5, which stems from the software including a segmentation violation in the component serverexample1.c. The vulnerability is caused by the following...
Libec_Iccp_Mod buffer error vulnerability
LibiecIccpMod is used to modify Libiec6850 Mms to use the Iccp client. A buffer error vulnerability exists in LibiecIccpMod v1.5, which stems from the software containing a heap buffer overflow component, MMSclientexample1.c. The vulnerability is caused by the following...
Sentry 8.2.0 - Remote Code Execution (Authenticated) Exploit
Exploit Title: Sentry 8.2.0 - Remote Code Execution RCE Authenticated Exploit Author: Mohin Paramasivam Shad0wQu35t Vulnerability Discovered By : Clement Berthaux SYNACKTIV Software Link: https://sentry.io/welcome/ Advisory: https://doc.lagout.org/Others/synacktivadvisorysentrypickle.pdf Tested o...
Evolution CMS 3.1.6 - Remote Code Execution (RCE) (Authenticated)
Exploit Title: Evolution CMS 3.1.6 - Remote Code Execution RCE Authenticated Date: 15-09-2021 Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://evo.im/ Software Link: https://github.com/evolution-cms/evolution/releases Version: 3.1.6 Category: Webapps Tested on: Linux/Windows Exampl...
A4: XML External Entities (XXE) ❗️ — Top 10 OWASP 2017
A4: XML External Entities XXE ❗️ — Top 10 OWASP 2017 Introduction XML presents a useful resource for sending data from service to service and for data processing internally but with anything, as soon as user input gets involved, things get dangerous. The processing of these files comes with an...
GHSA-5HJ3-VJJF-F5M7 Heap OOB in `SdcaOptimizerV2`
Impact An attacker can read from outside of bounds of heap allocated data by sending specially crafted illegal arguments to tf.rawops.SdcaOptimizerV2: python import tensorflow as tf tf.rawops.SdcaOptimizerV2 sparseexampleindices=1, sparsefeatureindices=1, sparsefeaturevalues=1.0,2.0,...
Heap OOB in `SdcaOptimizerV2`
Impact An attacker can read from outside of bounds of heap allocated data by sending specially crafted illegal arguments to tf.rawops.SdcaOptimizerV2: python import tensorflow as tf tf.rawops.SdcaOptimizerV2 sparseexampleindices=1, sparsefeatureindices=1, sparsefeaturevalues=1.0,2.0,...
Multiple Plugins - Reflected Cross-Site Scripting via PHPRelativePath Library
The plugins are using the PHPRelativePath library, which contain an example file affected a Reflected Cross-Site Scripting PoC POST /wp-content/plugins/mpl-publisher/vendor/grandt/relativepath/RelativePath.Example1.php HTTP/1.1 Accept:...
apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2021-35936 via apache-airflow (1.10.12)
apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2021-35936 Source advisory:...
CVE-2021-37672
TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of heap allocated data by sending specially crafted illegal arguments to tf.rawops.SdcaOptimizerV2. The implementation does not check that the length of...
Karton - Distributed Malware Processing Framework Based On Python, Redis And MinIO
Distributed malware processing framework based on Python, Redis and MinIO. The idea Karton is a robust framework for creating flexible and lightweight malware analysis backends. It can be used to connect malware analysis systems into a robust pipeline with very little effort. We've been in the...
MobileTogether Server 7.3 XML Injection
Advisory: XML External Entity Expansion in MobileTogether Server RedTeam Pentesting discovered a vulnerability in the MobileTogether server which allows users with access to at least one app to read arbitrary, non-binary files from the file system and perform server-side requests. The vulnerabili...
com.slack.api:bolt-micronaut (1.0.8), info.novatec:micronaut-camunda-bpm-feature (0.3.1) +8 more potentially affected by CVE-2021-32769 via io.micronaut:micronaut-http-server-netty (1.3.5)
io.micronaut:micronaut-http-server-netty MAVEN version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut 1.0.8 - info.novatec:micronaut-camunda-bpm-feature...
com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.3.27.final)
io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...
org.hspconsortium:hsp-api-webapp (0.8), org.hspconsortium:hsp-client-profile-extension-example (0.8) +1 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.1)
ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - org.hspconsortium:hsp-api-webapp 0.8 -...
Online Library Management System 2.0 Cross Site Request Forgery Vulnerability
Exploit Title: Online Library Management System Exploit Author : Mohit Dabas Vendor Homepage : https://phpgurukul.com Software Link : https://phpgurukul.com/online-library-management-system/ Version: 2.0 Tested on : LAMPP Description Online Library Management System has got CSRF in admin panel...
Online Library Management System 2.0 Cross Site Request Forgery
Exploit Title: Online Library Management System Date:15/06/2021 Exploit Author : Mohit Dabas Vendor Homepage : https://phpgurukul.com Software Link : https://phpgurukul.com/online-library-management-system/ Version: 2.0 Tested on : LAMPP Description Online Library Management System has got CSRF i...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Squirrelly
CVE-2021-32819 CVE-2021-32819 : SquirrellyJS mixes pure templa...
java-example:ExampleFuzzerNative: Heap-buffer-overflow in parseInternal
Detailed Report: https://oss-fuzz.com/testcase?key=5343167338643456 Project: java-example Fuzzing Engine: libFuzzer Fuzz Target: ExampleFuzzerNative Job Type: libfuzzerasanjava-example Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x604000019fc0 Crash State:...