37 matches found
CVE-2026-45047
bird-lg-go is a BIRD looking glass in Go. Prior to 1.4.5, the apiHandler and similarly webHandlerTelegramBot processes user-provided JSON payloads by directly using json.NewDecoderr.Body.Decode&request without restricting the maximum read size. An unauthenticated remote attacker can stream an...
EUVD-2026-32583
bird-lg-go is a BIRD looking glass in Go. Prior to 1.4.5, the apiHandler and similarly webHandlerTelegramBot processes user-provided JSON payloads by directly using json.NewDecoderr.Body.Decode&request without restricting the maximum read size. An unauthenticated remote attacker can stream an...
aiwaves-cn agents is vulnerable to resource consumption in the recall_relevant_memories_to_working_memory function
A weakness has been identified in aiwaves-cn agents up to e8c4e3c2d19739d3dff59e577d1c97090cc15f59. Affected by this issue is the function recallrelevantmemoriestoworkingmemory of the file core/cat/lookingglass/straycat.py of the component cheshirecatcore. This manipulation causes resource...
CVE-2026-8319
The CVE-2026-8319 entry affects aiwaves-cn agents, specifically the component cheshire_cat_core and the function recall_relevant_memories_to_working_memory in stray_cat.py. The issue is described as causing resource consumption and is exploitable remotely, with a publicly available exploit. Becau...
CVE-2020-24857
Cross Site Scripting vulnerabilty found in IXPManager v.5.6.0 allows attackers to excute arbitrary code via the looking glass component...
EUVD-2005-2777
Malware in sbrugna...
OP-SEC Multi-Router Looking Glass Web Detection
Binary data op-secmrlgdetect.nbin...
Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability
Multi-Router Looking Glass MRLG contains a buffer overflow vulnerability that could allow remote attackers to cause an arbitrary memory write and memory corruption...
CVE-2020-24857
Cross Site Scripting vulnerabilty found in IXPManager v.5.6.0 allows attackers to excute arbitrary code via the looking glass component...
Cross site scripting
Cross Site Scripting vulnerabilty found in IXPManager v.5.6.0 allows attackers to excute arbitrary code via the looking glass component...
IXP Manager 跨站脚本漏洞
IXP Manager is a full-stack web application from INEX open source. It supports peer-to-peer operations for about 200 Internet Exchange Points IXPs worldwide. A security vulnerability exists in IXP Manager version v.5.6.0, which can be exploited by an attacker to execute arbitrary code via the...
CVE-2020-24857
IXP Manager v5.6.0 contains a Cross Site Scripting vulnerability in the looking glass component that could lead to arbitrary code execution. Root cause is a reflected/stored XSS vector reported across multiple sources; exploitability details are not fully specified in the provided documents. A pa...
CVE-2020-24857
Cross Site Scripting vulnerabilty found in IXPManager v.5.6.0 allows attackers to excute arbitrary code via the looking glass component...
EUVD-2014-3868
fastping.c in MRLG aka Multi-Router Looking Glass before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption...
CVE-2014-3931
fastping.c in MRLG aka Multi-Router Looking Glass before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption...
CVE-2014-3931
fastping.c in MRLG aka Multi-Router Looking Glass before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
LG Cross-Site Scripting Vulnerability
LG Looking Glass is a set of web applications written in Perl for connecting to a router or console. LG suffers from a cross-site scripting vulnerability. It allows an attacker to inject arbitrary web script or HTML via the "addr" parameter...
Looking Glass Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14680/info Looking Glass is prone to a cross-site scripting vulnerability. This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the software. Other attacks are also possibl...
Looking Glass 20040427 - Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14682/info Looking Glass may be exploited to execute arbitrary commands. An attacker can prefix arbitrary commands with the '|' character, supply them through a URI parameter and have them executed in the context of the...
Internet Bug Bounty: Multiple issues in looking-glass software (aka from web to BGP injections)
During the month of May 2014 we performed an offensive security analysis, trying to find how hard would it be for a low-to-medium skilled attacker to disrupt the core of the Internet ie. achieve the largest possible impact at the lowest common layer, with minimal resource. This is a confidential...