Lucene search
+L

3652 matches found

CNVD
CNVD
added 2020/03/09 12:00 a.m.9 views

Nitro Pro Heap Memory Corruption Vulnerability (CNVD-2020-16096)

Nitro Pro is a desktop product with full PDF creation and editing capabilities. A heap memory corruption vulnerability exists in npdf.dll in versions prior to Nitro Pro 13.13.2.242. An attacker can exploit this vulnerability via a specially crafted PDF document to cause heap corruption to occur a...

8.1CVSS6.9AI score0.02486EPSS
SaveExploits1References1
NVD
NVD
added 2020/02/28 8:15 p.m.15 views

CVE-2019-19943

The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parameter. It may be possible to achieve remote code execution because of a double free...

7.5CVSS7.9AI score0.04262EPSS
SaveExploits1References1
Prion
Prion
added 2020/02/28 8:15 p.m.26 views

Double free

The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parameter. It may be possible to achieve remote code execution because of a double free...

5CVSS8AI score0.04262EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2020/02/28 7:40 p.m.125 views

CVE-2019-19943

CVE-2019-19943 affects Pablo Quick n Easy Web Server (quickweb.exe) v3.3.8. The HTTP service is vulnerable to remote unauthenticated heap memory corruption when handling a large host or domain parameter, with a double free cited as the underlying cause. This can lead to remote code execution per...

7.5CVSS7.9AI score0.04262EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/02/28 7:40 p.m.26 views

CVE-2019-19943

The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parameter. It may be possible to achieve remote code execution because of a double free...

8AI score0.04262EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2020/02/25 12:00 a.m.27 views

EulerOS 2.0 SP8 : librabbitmq (EulerOS-SA-2020-1163)

According to the version of the librabbitmq package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in amqphandleinput in amqpconnection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory...

9.8CVSS8.3AI score0.03317EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/02/25 12:00 a.m.2 views

Quick N Easy Web Server Denial of Service Vulnerability

Quick N Easy Web Server is a web server that supports asp. A denial of service vulnerability exists in Quick N Easy Web Server. An attacker can exploit the vulnerability to cause remote heap memory corruption...

6.8AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2020/02/24 12:00 a.m.121 views

Quick N Easy Web Server 3.3.8 Denial Of Service

Title: Quick N Easy Web Server 3.3.8 - Denial of Service PoC Date: 2019-12-25 Author: Cody Winkler Vendor Homepage: https://www.pablosoftwaresolutions.com/ Software Link: https://www.pablosoftwaresolutions.com/html/quickneasywebserver.html Version: $ python exploit.py 127.0.0.1 80 """ from future...

SaveExploits0
zdt
zdt
added 2020/02/24 12:00 a.m.64 views

Quick N Easy Web Server 3.3.8 - Denial of Service Exploit

Title: Quick N Easy Web Server 3.3.8 - Denial of Service PoC Author: Cody Winkler Vendor Homepage: https://www.pablosoftwaresolutions.com/ Software Link: https://www.pablosoftwaresolutions.com/html/quickneasywebserver.html Version: $ python exploit.py 127.0.0.1 80 """ from future import...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2020/02/24 12:00 a.m.10 views

Huawei EulerOS: Security Advisory for librabbitmq (EulerOS-SA-2020-1116)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.03317EPSS
SaveExploits0References2
Exploit DB
Exploit DB
added 2020/02/24 12:00 a.m.158 views

Quick N Easy Web Server 3.3.8 - Denial of Service (PoC)

Title: Quick N Easy Web Server 3.3.8 - Denial of Service PoC Date: 2019-12-25 Author: Cody Winkler Vendor Homepage: https://www.pablosoftwaresolutions.com/ Software Link: https://www.pablosoftwaresolutions.com/html/quickneasywebserver.html Version: $ python exploit.py 127.0.0.1 80 """ from future...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2020/02/24 12:00 a.m.36 views

Quick N Easy Web Server 3.3.8 - Denial of Service (PoC)

Quick N Easy Web Server 3.3.8 - Denial of Service PoC Title: Quick N Easy Web Server 3.3.8 - Denial of Service PoC Date: 2019-12-25 Author: Cody Winkler Vendor Homepage: https://www.pablosoftwaresolutions.com/ Software Link: https://www.pablosoftwaresolutions.com/html/quickneasywebserver.html...

0.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/02/24 12:00 a.m.28 views

EulerOS 2.0 SP5 : librabbitmq (EulerOS-SA-2020-1116)

According to the version of the librabbitmq package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in amqphandleinput in amqpconnection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory...

9.8CVSS8.3AI score0.03317EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/02/13 12:00 a.m.17 views

Profile API CreateEnvBlock Local Information Disclosure

The exported function CreateEnvBlock from profapi.dll which is used by the CreateEnvironmentBlock API function has an information disclosure vulnerability when building the environment block for a user which can be locally exploited to disclose heap memory of a process calling the API. For exampl...

0.6AI score
SaveExploits0References1
CNVD
CNVD
added 2020/02/11 12:00 a.m.6 views

Squid Information Disclosure Vulnerability (CNVD-2020-05099)

Squid is a caching and forwarding HTTP web proxy. An information disclosure vulnerability exists in versions prior to Squid 4.10. An attacker can exploit this vulnerability to obtain sensitive information from heap memory via a specially crafted FTP server...

7.5CVSS8.1AI score0.10493EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/04 9:15 p.m.29 views

CVE-2019-12528

An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes...

7.5CVSS6.1AI score
SaveExploits0References10
NVD
NVD
added 2020/02/04 9:15 p.m.22 views

CVE-2019-12528

An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes...

7.5CVSS8.2AI score0.10493EPSS
SaveExploits0References10
OSV
OSV
added 2020/02/04 9:15 p.m.2 views

DEBIAN-CVE-2019-12528

An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes...

7.5CVSS6.5AI score0.10493EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2020/02/04 9:15 p.m.29 views

CVE-2019-12528

An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes...

7.5CVSS6.6AI score0.10493EPSS
SaveExploits0References3
Prion
Prion
added 2020/02/04 9:15 p.m.24 views

Design/Logic Flaw

An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes...

5CVSS7.5AI score0.10493EPSS
SaveExploits0References10Affected Software5
Rows per page
Query Builder