Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2017/03/10 11:35 a.m.38 views

shopify-scripts: sprintf gem - format string combined attack

In the sprintf gem, NOT included in mruby-engine, there are severe vulnerabilities, including information leak, and heap buffer overflow. Here are the technical details. Technical Error 1: ============== The CHECKl macro can sometimes receive negative values, that will bypass the size checks, sin...

7.3AI score
SaveExploits0
Rows per page
Query Builder