1905 matches found
Apple macOS Catalina Find My Component Input Validation Error Vulnerability
Apple macOS Catalina is a proprietary operating system developed by Apple Inc. for Mac computers.Find My is one of the components that supports tracking the location of Apple devices. A security vulnerability exists in the Find My component in Apple macOS Catalina versions prior to 10.15.5. A loc...
Frigate 3.36 - Buffer Overflow (SEH)
Exploit Title: Frigate 3.36 - Buffer Overflow SEH Exploit Author: Xenofon Vassilakopoulos Date: 2020-05-03 Version: 3.36 Vendor Homepage: http://www.Frigate3.com/ Software Link Download: http://www.Frigate3.com/download/Frigate3Stdv36.exe Tested on: Windows 7 Professional SP1 x86 Steps to reprodu...
AZL-7337 CVE-2018-21232 affecting package re2c for versions less than 2.0-1
re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags...
DEBIAN-CVE-2018-21232
re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags...
Design/Logic Flaw
re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags...
Buffer Overflow
Overview Affected versions of this package are vulnerable to Buffer Overflow re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags. Remediation Upgrade re2c to version 2.0.3 or higher. References - GitHub Issue...
UBUNTU-CVE-2018-21232
re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags...
binutils: integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c
An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in bfddwarf2findnearestline in dwarf2.c, as demonstrated by nm...
WordPress Plugin Bug Opens 100K Websites to Compromise
A high-severity cross-site request forgery CSRF vulnerability in Real-Time Find and Replace, a WordPress plugin installed on more than 100,000 sites, could lead to cross-site scripting and the injection of malicious JavaScript anywhere on a victim site. According to research from Wordfence releas...
Real-Time Find and Replace < 4.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
This flaw could allow any user to inject malicious Javascript anywhere on a site if they could trick a site’s administrator into performing an action, like clicking on a link in a comment or email...
Real-Time Find and Replace < 4.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
This flaw could allow any user to inject malicious Javascript anywhere on a site if they could trick a site’s administrator into performing an action, like clicking on a link in a comment or email. PoC...
Httpgrep - Scans HTTP Servers To Find Given Strings In URIs
A python tool which scans for HTTP servers and finds given strings in URIs. Usage $ httpgrep -H --== httpgrep by nullsecurity.net ==-- usage httpgrep -h -s opts | opts -h - single host or host-range/cidr-range or file containing hosts, e.g.: foobar.net, 192.168.0.1-192.168.0.254, 192.168.0.0/24,...
The vulnerability of the array_find function in the CUPS printing server, related to reading beyond the buffer memory limit, allows an attacker to access confidential data.
The vulnerability of the arrayfind function in the CUPS printing server is related to incorrect memory boundary checking. Exploiting this vulnerability could allow an attacker to access confidential data...
Update Rollup 3 for System Center 2012 R2 Operations Manager
Update Rollup 3 for System Center 2012 R2 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 3 for Microsoft System Center 2012 R2 Operations Manager. Additionally, this article contains the installation instructions for Update Rollup 3 for System...
CVE-2019-10585
Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053...
Integer overflow
Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053...
The vulnerability in the `fs/btrfs/volumes.c` function of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the fs/btrfs/volumes.c function in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure due to incorrect processing of finddevice...
stb heap buffer overflow vulnerability (CNVD-2020-04061)
stb is a C/C++ library consisting of a single file. A heap buffer overflow vulnerability exists in stbttfindtable in stbtruetype.h in stb 1.22 and earlier. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...