28 matches found
TCL LinkHub Mesh Wi-Fi 缓冲区错误漏洞
TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. A security vulnerability exists in TCL LinkHub Mesh Wi-Fi that stems from a stack-based buffer overflow vulnerability in the confsrv addTimeGroup function of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially crafted network packet could...
Wire server denial of service vulnerability
Wire is a chat software from the German company Wire. The software supports Web, WindowsiOS, Android, OS X platforms, has a group function, can voice calls, send photos and its original way of greeting PING. wire server has a denial of service vulnerability, the vulnerability stems from the syste...
CVE-2017-13710
The setupgroup function in elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a group section that is too small...
UBUNTU-CVE-2017-7610
The checkgroup function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file...
PT-2017-3782 · Red Hat +3 · Elfutils +3
Name of the Vulnerable Software and Affected Versions: elfutils version 0.168 Description: The issue is related to a heap-based buffer over-read and application crash in the check group function. This can be exploited by remote attackers via a crafted ELF file, leading to a denial of service. The...
presto! pagemanager <= 9.01 - Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: Presto! PageManager http://www.newsoftinc.com/products/productpage.php?PId=5 Versions: = 9.01 Platforms: Windows, MacOSX Bugs: A Heap-overflow B Arbitray files downloading C Denial of Service Exploitation: remote Date: 14 Mar 2012...
Thinksaas SQL注入#3
简要描述： Thinksaas SQL注入3 详细说明： 在Thinksaas 的小组功能处，发完贴后，可以补贴。 在编辑补贴时，过滤不完整，导致SQL注入，直接可以注入出数据，显示到帖子内容中。 /app/group/action/after.php文件，在边编辑补贴内容时： //编辑执行 case "edo": if$POST'token' != $SESSION'token' tsNotice'非法操作！'; $afterid = intval$POST'afterid'; $strAfter = $new'group'-find'grouptopicadd',array...
