CVE-2019-25607

CVE-2019-25607 affects Axessh 4.2. The vulnerability is a stack-based buffer overflow in the log file name field, allowing a local attacker to overflow a buffer at offset 214 bytes and overwrite the instruction pointer to execute shellcode with system privileges. Public metrics indicate a high se...

CVE-2019-25607 Axessh 4.2 Local Stack-based Buffer Overflow via Log File Name

Axessh 4.2 contains a stack-based buffer overflow vulnerability in the log file name field that allows local attackers to execute arbitrary code by supplying an excessively long filename. Attackers can overflow the buffer at offset 214 bytes to overwrite the instruction pointer and execute...

CVE-2019-25607 Axessh 4.2 Local Stack-based Buffer Overflow via Log File Name

Axessh 4.2 contains a stack-based buffer overflow vulnerability in the log file name field that allows local attackers to execute arbitrary code by supplying an excessively long filename. Attackers can overflow the buffer at offset 214 bytes to overwrite the instruction pointer and execute...

CVE-2019-25593

jetCast Server 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Log directory configuration field. Attackers can paste a buffer of 5000 characters into the Log directory input, then click Start to...

CVE-2019-25593 jetCast Server 2.0 Denial of Service via Log Directory

jetCast Server 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Log directory configuration field. Attackers can paste a buffer of 5000 characters into the Log directory input, then click Start to...

CVE-2019-25593 jetCast Server 2.0 Denial of Service via Log Directory

jetCast Server 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Log directory configuration field. Attackers can paste a buffer of 5000 characters into the Log directory input, then click Start to...

CVE-2019-25593

JetCast Server 2.0 is affected by a local denial-of-service vulnerability: supplying an excessively long string (about 5000 characters) to the Log directory configuration field and starting the server can crash the process. Root cause is input handling of the Log directory field leading to a cras...

CVE-2019-25590 Axessh 4.2 Denial of Service via Log File Name

Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash the application by supplying an excessively long string in the log file name field. Attackers can enable session logging, paste a buffer of 500 or more characters into the log...

CVE-2019-25590 Axessh 4.2 Denial of Service via Log File Name

Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash the application by supplying an excessively long string in the log file name field. Attackers can enable session logging, paste a buffer of 500 or more characters into the log...

CVE-2019-25590

CVE-2019-25590 : Axessh 4.2 suffers a denial-of-service flaw in the logging configuration. A local attacker can crash the application by supplying an excessively long string in the log file name field when session logging is enabled; the crash is triggered during a Telnet session establishment af...

CVE-2019-25590

Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash the application by supplying an excessively long string in the log file name field. Attackers can enable session logging, paste a buffer of 500 or more characters into the log...

LabF Axessh 缓冲区错误漏洞

LabF Axessh is a security terminal client software developed by LabF Corporation. Version 4.2 of LabF Axessh contains a buffer overflow vulnerability. This vulnerability stems from a stack-based buffer overflow in the log file name field, which could allow local attackers to execute arbitrary cod...

PT-2026-26981

jetCast Server 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Log directory configuration field. Attackers can paste a buffer of 5000 characters into the Log directory input, then click Start to...

LabF Axessh 安全漏洞

LabF Axessh is a security terminal client software developed by LabF Corporation. Version 4.2 of LabF Axessh contains a security vulnerability. This vulnerability stems from a log configuration that exposes a denial-of-service vulnerability, which could allow local attackers to cause the...

PT-2026-26995

Axessh 4.2 contains a stack-based buffer overflow vulnerability in the log file name field that allows local attackers to execute arbitrary code by supplying an excessively long filename. Attackers can overflow the buffer at offset 214 bytes to overwrite the instruction pointer and execute...

PT-2026-26997

JetAudio jetCast Server 2.0 contains a stack-based buffer overflow vulnerability in the Log Directory configuration field that allows local attackers to overwrite structured exception handling pointers. Attackers can inject alphanumeric encoded shellcode through the Log Directory field to trigger...

jetAudio 缓冲区错误漏洞

JetAudio is a multimedia player software developed by the JetAudio company. Version 2.0 of JetAudio contains a buffer overflow vulnerability, which stems from a stack-based buffer overflow in the log directory configuration field. This vulnerability could allow local attackers to overwrite...

jetAudio jetCast Server 安全漏洞

The jetAudio jetCast Server is a multimedia player server developed by the jetAudio company. Version 2.0 of the jetaudio jetCast Server has a security vulnerability. This vulnerability stems from a log directory configuration field that contains a denial-of-service vulnerability, which could allo...

PT-2026-26978

Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash the application by supplying an excessively long string in the log file name field. Attackers can enable session logging, paste a buffer of 500 or more characters into the log...

CVE-2025-13910

The WP-WebAuthn plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via the wwaauth AJAX endpoint in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping on user supplied attributes logged by the plugin. This makes it...