35 matches found
CVE-2026-82357
RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...
CVE-2026-82357
The RT-Labs AB C-Open CANopen software contains a NULL pointer dereference vulnerability occurring when the LSS protocol is utilized to configure the device. The root cause is triggered if a user-defined application object lacks all required subindexes for object 0x1018 . An unauthenticated, remo...
CVE-2026-82357 RT-Labs AB C-Open CANopen NULL pointer dereference
RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...
EUVD-2026-91022
RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...
CVE-2026-82357 RT-Labs AB C-Open CANopen NULL pointer dereference
RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...
CVE-2026-82357: NULL Pointer Dereference
RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...
PT-2026-103995
Name of the Vulnerable Software and Affected Versions RT-Labs AB C-Open CANopen versions prior to 1.1.1 Description A NULL pointer dereference occurs when the LSS Layer Setting Services protocol is used to configure the device. This happens if an object defined by the user application lacks all...
CVE-2026-91775
LimeSurvey Community Edition 7.0.14 fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import warnings, resulting in XSS in the administrative interface...
EUVD-2026-85427
LimeSurvey fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import warnings, resulting in XSS in the administrative interface...
CVE-2026-91775
LimeSurvey Community Edition 7.0.14 is vulnerable to Reflected XSS because it fails to safely encode attacker-controlled content from a crafted .lss survey file . The vulnerability occurs specifically when the application displays import warnings , allowing an attacker to execute scripts in the a...
CVE-2026-91775: Improper Neutralization of Input During Web Page Generation
LimeSurvey Community Edition 7.0.14 fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import warnings, resulting in XSS in the administrative interface...
PT-2026-97431
Name of the Vulnerable Software and Affected Versions LimeSurvey Community Edition version 7.0.14 Description Cross-site Scripting XSS occurs in the administrative interface because the software fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying...
CVE-2024-6906: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file addleavenonuser.php. The manipulation of the argument LSS leads to sql injection. The attack may be initiated remotely. The exploit has been...
lss-planetariums.info Cross Site Scripting vulnerability OBB-2827027
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
lss-t.com Cross Site Scripting vulnerability OBB-1205478
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Ethereal <= 0.10.9 "3G-A11" Remote Buffer Overflow Exploit (2)
No description provided by source. / Ethereal IAPP remote buffer overflow 2 PoC exploit --------------------------------------------------- To test this vulnerability on windows, try to send 3-10 packets that will trigger the crash, and scroll between captured packets in Ethereal. Coded by Leon...
Crob FTP Server <= 3.6.1 - Remote Stack Overflow Exploit
No description provided by source. / CrobFTP remote stack overflow PoC --------------------------------- Tested on Crob FTP Server 3.6.1, Windows XP Coded by Leon Juranic [email protected] LSS Security / http://security.lss.hr / include stdio.h include windows.h include time.h pragma comment...
Panda AntiVirus Zoo Denial of Service Vulnerability
Panda Software Antivirus/Internet Security before 20070402 allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file. OpenVAS Vulnerability Test Panda AntiVirus Zoo Denial of Service Vulnerability LSS-NVT-2010-038...
Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004
The remote host is missing Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004. One or more of the following components are affected: Alias Manager CoreTypes c++filt Dock Launch Services Net-SNMP Ruby SMB File Server System Configuration Tomcat VPN WebKit OpenVAS Vulnerability Test Mac OS ...
Mac OS X 10.6.1 Update
The remote host is missing Mac OS X 10.6.1 Update. One or more of the following components are affected: Flash Player plug-in OpenVAS Vulnerability Test Mac OS X 10.6.1 Update LSS-NVT-2010-026 Developed by LSS Security Team Copyright C 2010 LSS This program is free software; you can redistribute ...