106 matches found
CVE-2023-31462: Incorrect Default Permissions
An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges...
PT-2023-23343 · Steelseries · Steelseries Gg
Name of the Vulnerable Software and Affected Versions: SteelSeries GG version 36.0.0 Description: The issue allows attackers to exploit an open API listener to create a sub-application that will be executed automatically from a controlled location, due to a path traversal vulnerability...
b4.gg Cross Site Scripting vulnerability OBB-1335303
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Code injection
The transferProxy and approveProxy functions of a smart contract implementation for SmartMesh SMT, an Ethereum ERC20 token, allow attackers to accomplish an unauthorized transfer of digital assets because replay attacks can occur with the same-named functions with the same signatures in other...
CVE-2018-10769
The transferProxy and approveProxy functions of a smart contract implementation for SmartMesh SMT, an Ethereum ERC20 token, allow attackers to accomplish an unauthorized transfer of digital assets because replay attacks can occur with the same-named functions with the same signatures in other...
gg-lb.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-457572 Description| Value ---|--- Affected Website:| gg-lb.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...
SQL injection vulnerability in the ID parameter of the GG.aspx page of the Quality Supervision Station Comprehensive Information Service Platform of Zhuhai Xinhua Tong Software Co.
ZHXHT Supervision and Regulation Comprehensive Service Platform is a comprehensive platform integrating engineering supervision, testing supervision, commercial mixing supervision, web portal, commercial mixing quality networking supervision, credit rating, OA office, SMS system, wireless...
Gentoo Security Advisory GLSA 201412-10
Gentoo Linux Local Security Checks GLSA 201412-10 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
CVE-2013-6487
CVE-2013-6487 affects Pidgin/libgadu: Integer/Content-Length handling in the Gadu-Gadu parser (gg) in libpurple/http.c can overflow a buffer when a large Content-Length is processed. This vulnerability is described as allowing a buffer overflow with potential remote code execution or crash. Publi...
CVE-2013-6487: Undefined Security Weakness
Integer overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu gg parser in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a large Content-Length value, which triggers a buffer overflow...
xRadio 0.95b - '.xrl' Local Buffer Overflow (SEH)
GotGeek Labs http://www.gotgeek.com.br/ xRadio 0.95b .xrl Local Buffer Overflow SEH + Description With xRadio you can listen internet radio with Windows Media Player Technology tm. You can setup a radio list and import asx's files. The program stay on the tray bar. + Information Title: xRadio 0.9...
Microsoft Media Decompression Remote Code Execution Vulnerability (2447961)
This host is missing a critical security update according to Microsoft Bulletin MS10-094. OpenVAS Vulnerability Test $Id: secpodms10-094.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Media Decompression Remote Code Execution Vulnerability 2447961 Authors: Veerendra GG Copyright c 2010 SecPod...
Bo Yin technology management system 1 7, then storm latest oday-vulnerability warning-the black bar safety net
The original vulnerability: GG search inurl:cpzs. asp? ProClass= The root directory under /manage/Product/addnews. asp Content just to write the thumbnail upload there the asp of the horse After the submission of the to the EDIT to find that the asp name Structure http:// 网址 /UpLoadPic/ProPic/ 上传...
Unfixed XSS vulnerability at gg-no-re.com
Security researcher X4X4X4X4, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting gg-no-re.com, which at the time of submission ranked 356831 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It is currently...
Cross site request forgery (csrf)
Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forgery CSRF attacks and add arbitrary user accounts or cause a denial of service as administrators via an unspecified "crafted link," possibly related to the gg protocol...
Buffer overflow
Multiple buffer overflows in the HandleEmotsConfig function in the GG Client in Gadu-Gadu 7.7 Build 3669 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service gg.exe process crash via a long string in an emots.txt file...
CVE-2007-6409
The CVE-2007-6409 entry concerns the gg protocol handler in Gadu-Gadu. When installed but not running, it does not properly handle the skin attribute, allowing remote attackers to cause a denial of service through unspecified network traffic, resulting in resource consumption. The vulnerability a...
CVE-2007-6411
CVE-2007-6411 affects the GG Client (Gadu-Gadu) 7.7 Build 3669. The vulnerability arises from multiple buffer overflows in the HandleEmotsConfig function, enabling a user-assisted remote attacker to execute arbitrary code or cause a denial of service (gg.exe process crash) via a long string in an...
CVE-2007-6411
Multiple buffer overflows in the HandleEmotsConfig function in the GG Client in Gadu-Gadu 7.7 Build 3669 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service gg.exe process crash via a long string in an emots.txt file...
CVE-2007-6410: Cross-Site Request Forgery (CSRF)
Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forgery CSRF attacks and add arbitrary user accounts or cause a denial of service as administrators via an unspecified "crafted link," possibly related to the gg protocol...