GNU LibreDWG decode_R13_R2000 Buffer Overflow Vulnerability

GNU LibreDWG is a C language library for working with DWG files. A buffer overflow vulnerability exists in GNU LibreDWG decodeR13R2000, which can be exploited by a remote attacker to submit a specially crafted malicious file that can be tricked into parsing it to execute arbitrary code in the...

CVE-2020-8997

Older generation Abbott FreeStyle Libre sensors allow remote attackers within close proximity to enable write access to memory via a specific NFC unlock command. NOTE: The vulnerability is not present in the FreeStyle Libre 14-day in the U.S announced in August 2018 and FreeStyle Libre 2 outside...

Command injection

Older generation Abbott FreeStyle Libre sensors allow remote attackers within close proximity to enable write access to memory via a specific NFC unlock command. NOTE: The vulnerability is not present in the FreeStyle Libre 14-day in the U.S announced in August 2018 and FreeStyle Libre 2 outside...

CVE-2020-8997

The CVE concerns older generation Abbott FreeStyle Libre sensors. Affected component: the NFC unlock mechanism enables a remote attacker in close proximity to write memory. Root cause centered on an NFC unlock command that grants write access. Impact as described: potential memory modification or...

CVE-2020-8997

Older generation Abbott FreeStyle Libre sensors allow remote attackers within close proximity to enable write access to memory via a specific NFC unlock command. NOTE: The vulnerability is not present in the FreeStyle Libre 14-day in the U.S announced in August 2018 and FreeStyle Libre 2 outside...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2020-04064)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in readpagesmap in decoder2007.c in GNU LibreDWG 0.9.3.2564. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...

Teclib GLPI FusionInventory plugin code issue vulnerability

Teclib GLPI is an open source IT asset management suite from Teclib France. The suite includes device status management, asset inventory storage, management processes and work log management, etc. FusionInventory is used in one of the asset information update plug-in . A code issue vulnerability...

UBUNTU-CVE-2019-15142

In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read by crafting a DJVU file...

0CTF 2019 zero_task conditions for competition use-vulnerability warning-the black bar safety net

Foreword 0CTF2019 pwn title zerotask, the difficulty in pwn title in the most low, vulnerability for the type of conditions of competition. 2. Title protection ! Full protection turned on 3. Title function Topic implements an encryption and decryption function, a total of three functions. ! 1...

GNU LibreDWG null pointer back-reference vulnerability (CNVD-2019-12550)

GNU LibreDWG is a GNU Project C library for working with DWG files. A null pointer back-reference vulnerability exists in the 'dwgdxfLEADER' function of the dwg.spec file in GNU LibreDWG version 0.7 and 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service...

GNU LibreDWG Null Pointer Backreference Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A null pointer back-reference vulnerability exists in the '.spec' function of the dwg.spec file in GNU LibreDWG version 0.7 and 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2019-12548)

GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'dwgdecodeeeddata' function of the decode.c file in GNU LibreDWG version 0.7 and version 0.7.1645. An attacker could exploit this vulnerability to execute code or cause a denial of...

GNU LibreDWG Buffer Overflow Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'dwgdxfLTYPE' function of the dwg.spec file in GNU LibreDWG version 0.7 and 0.7.1645, which can be exploited by an attacker to cause a denial of service...

annuaire.positron-libre.com XSS vulnerability

Open Bug Bounty ID: OBB-715798 Description| Value ---|--- Affected Website:| annuaire.positron-libre.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

Alienor Web Libre 2.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Alienor Web Libre 2.0 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://alienor.org/ Software Link: https://excellmedia.dl.sourceforge.net/project/alienorweblibre/alienorweblibre.zip Version: 2.0 Category:...

Alienor Web Libre 2.0 - SQL Injection

Alienor Web Libre 2.0 - SQL Injection Exploit Title: Alienor Web Libre 2.0 - SQL Injection Dork: N/A Date: 2018-11-08 Exploit Author: Ihsan Sencan Vendor Homepage: http://alienor.org/ Software Link: https://excellmedia.dl.sourceforge.net/project/alienorweblibre/alienorweblibre.zip Version: 2.0...

Alienor Web Libre 2.0 SQL Injection

Exploit Title: Alienor Web Libre 2.0 - SQL Injection Dork: N/A Date: 2018-11-08 Exploit Author: Ihsan Sencan Vendor Homepage: http://alienor.org/ Software Link: https://excellmedia.dl.sourceforge.net/project/alienorweblibre/alienorweblibre.zip Version: 2.0 Category: Webapps Tested on:...

Alienor Web Libre 2.0 - SQL Injection

Exploit Title: Alienor Web Libre 2.0 - SQL Injection Dork: N/A Date: 2018-11-08 Exploit Author: Ihsan Sencan Vendor Homepage: http://alienor.org/ Software Link: https://excellmedia.dl.sourceforge.net/project/alienorweblibre/alienorweblibre.zip Version: 2.0 Category: Webapps Tested on:...

meteo-sciez.com XSS vulnerability

Open Bug Bounty ID: OBB-596354 Description| Value ---|--- Affected Website:| meteo-sciez.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

listado.mercadolibre.com.bo XSS vulnerability

Open Bug Bounty ID: OBB-511973 Description| Value ---|--- Affected Website:| listado.mercadolibre.com.bo Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...