348 matches found
Microsoft Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability
Team Foundation Server is a Microsoft product that provides source code management, reporting, requirements management, project management, automated build, lab management, testing, and release management capabilities. Azure DevOps Server, formerly known as Team Foundation Server TFS, is a locall...
CVE-2019-2105
In FileInputStream::Read of fileinputstream.cc, there is a possible memory corruption due to uninitialized data. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android...
CVE-2019-1893
A vulnerability in Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS of an affected device as root. The vulnerability is due to insufficient input validation of a configuration file...
CVE-2019-12099
In PHP-Fusion 9.03.00, editprofile.php allows remote authenticated users to execute arbitrary code because includes/dynamics/includes/formfileinput.php and includes/classes/PHPFusion/Installer/Lib/Core.settings.inc mishandle executable files during avatar upload...
CVE-2018-20778
admin/?/plugin/filemanager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element...
CVE-2019-1000016
FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbsav1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in...
CVE-2018-18987
VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file without first checking for validity, allowing attacker supplied input to be written to known memory locations. This may cause the program to crash or allow remote code execution...
TOOL UPDATE: Cameradar v2.1.0
PenTestIT RSS Feed My initial post covering this open source Real Time Streaming Protocol RTSP surveillance camera access multi-tool was about an older version - Cameradar v2.0.0. A lot has happened since then and an update – Cameradar v2.1.0 was made available by the author. This version comes...
CVE-2018-1000223
SoundStretch command-line utility packaged with SoundTouch library is vulnerable to heap-based buffer overflow in WavFile.cpp:WavInFile::readHeaderBlock function that can lead to arbitrary code execution when processing untrusted file input...
Denial Of Service (DoS)
libarchive.so is vulnerable to denial of service DoS attacks. A malicious user can pass a zip file to the tradencdecryptupdate function in archivereadsupportformatzip.c, causing an out-of-bounds heap read that can crash the application...
DEBIAN-CVE-2018-1999015
FFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read vulnerability in ASFF format demuxer that can result in heap memory reading. This attack appear to be exploitable via specially crafted ASF file that has to provided as input. This vulnerability appears to...
CVE-2018-14044
SoundTouch library is vulnerable to reachable assertion in RateTransposer::setChannels function that can cause denial of service to applications using this library for processing the untrusted file input...
Denial Of Service (DoS)
libjasper.so is vulnerable to denial of service DoS attacks. A malicious user can pass a file to the calcstepsizes function in jpcdec.c to cause an assertion failure that can crash the application...
Denial Of Service (DoS)
libexiv2.so is vulnerable to denial of service DoS attacks. A malicious user can crash the applicaiton by passing a file to the tEXtToDataBuf function in pngimage.cpp...
Buffer overflow
WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length stack buffer where a value larger than the buffer can be read from a file into the buffer, causing the buffer to be overwritten, which may allow remote code execution or cause the application to crash...
CVE-2018-7494: Stack-based Buffer Overflow
WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length stack buffer where a value larger than the buffer can be read from a file into the buffer, causing the buffer to be overwritten, which may allow remote code execution or cause the application to crash...
Arbitrary File Write Vulnerability in CoverCMS v1.1.7
Shanghai Raging Wolf Network Technology Co., Ltd. is committed to the development of mobile Internet and enterprise website, e-commerce website. Arbitrary file writing vulnerability exists in CoverCMS v1.1.7, due to the product has not filtered the file name and content of the file to be written,...
DEBIAN-CVE-2018-1000097
Sharutils sharutils unshar command version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function lookslikeccode. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack...
Delta Electronics WPLSoft Heap Buffer Overflow Vulnerability
WPLSoft Delta PLC Programming Software is a PLC program programming software launched by Delta Electronics for use in the WINDOWS operating system environment. A heap buffer overflow vulnerability exists in Delta Electronics WPLSoft, where the application uses a fixed-length heap buffer, where a...