The vulnerability of the input function in the EFence application system for managing corporate mobile devices allows a hacker to execute arbitrary commands and gain access to read, modify, or delete data.

The vulnerability of the input function in the EFence application’s corporate mobile device management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary commands and gain access to read, modify, ...

PT-2023-16210 · Zephyrproject Rtos +1 · Zephyr

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A missing nullptr-check in the handle ra input function can cause a nullptr-deref. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

SUSE CVE-2006-5444

Integer overflow in the getinput function in the Skinny channel driver chanskinny.c in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads t...

CVE-2022-36054

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in the Contiki-NG operating system file os/net/ipv6/sicslowpan.c contains an input function that processes incoming packets and copies them into a packet buffer. Because of a...

DEBIAN-CVE-2020-22352

The gfdashsegmenterprobeinput function in GPAC v0.8 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2020-22056

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the configinput function in afacrossover.c...

Code Injection in c0oki3s/python-tools

✍️ Description python-tools is using an unsecure input function in https://github.com/C0oki3s/python-tools/blob/main/Dircreate/Dircreate.pyL8. Given that the script can be run using python2 or python3, if you feed the program with a python command and the python interpreter is python2, then the...

CVE-2020-27347

In tmux before version 3.1c the function inputcsidispatchsgrcolon in file input.c contained a stack-based buffer-overflow that can be exploited by terminal output...

CVE-2020-27347 tmux stack buffer overflow in function input_csi_dispatch_sgr_colon

In tmux before version 3.1c the function inputcsidispatchsgrcolon in file input.c contained a stack-based buffer-overflow that can be exploited by terminal output...

UBUNTU-CVE-2020-27347

In tmux before version 3.1c the function inputcsidispatchsgrcolon in file input.c contained a stack-based buffer-overflow that can be exploited by terminal output...

PT-2021-6711 · FFmpeg +3 · Ffmpeg +3

Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1 Description: The issue is related to a Buffer Overflow in the config input function within the libavfilter/vf gblur.c component of the Ffmpeg library. This allows attackers to potentially cause a Denial of Service or...

libcroco 'cr_input_new_from_uri' function denial of service vulnerability

libcroco is a CSS2 parsing library. A security vulnerability exists in the 'crinputnewfromuri' function in the cr-input.c file in libcroco versions 0.6.11 and 0.6.12. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer out-of-bounds read with the help of a...

UBUNTU-CVE-2016-8858

The kexinputkexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service memory consumption by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."...

On Python vulnerabilities mining those have to mention the thing-vulnerability warning-the black bar safety net

! Foreword Python because of its in the development of larger, more complex application aspects of the unique convenience, so that it in a computer environment becomes more and more indispensable. Although its obvious speech intelligibility and the use friendliness allows the software engineers a...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : postgresql-8.1, postgresql-8.3, postgresql-8.4 vulnerability (USN-1058-1)

Geoff Keating reported that a buffer overflow exists in the intarray module's input function for the queryint type. This could allow an attacker to cause a denial of service or possibly execute arbitrary code as the postgres user. Note that Tenable Network Security has extracted the preceding...