3731 matches found
CVE-2022-25793
CVE-2022-25793 describes a stack-based buffer overflow in Autodesk 3ds Max 2020–2022 during parsing of ABC/ActionScript Byte Code files. The overflow occurs when copying length-validated user data into a fixed-length stack buffer, potentially allowing arbitrary code execution. Documents vary on e...
CVE-2022-25793
A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer when parsing ActionScript Byte Code files. This...
Autodesk 3ds Max 安全漏洞
Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the American company Autodesk. A security vulnerability exists in Autodesk 3ds Max versions 2022, 2021, and 2020, which stems from the presence of a stack-based buffer overflow that can lead to code execution...
CVE-2022-25793: Improper Validation of Specified Quantity in Input
A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer when parsing ActionScript Byte Code files. This...
Missing upper limit definition in replaceLenderFee() of HomeFi.sol
Lines of code Vulnerability details Missing upper limit definition in replaceLenderFee of HomeFi.sol Impact The admin of the HomeFi contract can set lenderFee to greater than 100%, forcing calls to lendToProject to all projects created in the future to revert. Proof of Concept Using the function...
CVE-2022-2053
When a POST request comes through AJP and the request exceeds the max-post-size limit maxEntitySize, Undertow's AjpServerRequestConduit implementation closes a connection without sending any response to the client/proxy. This behavior results in that a front-end proxy marking the backend worker...
DEBIAN-CVE-2022-2053
When a POST request comes through AJP and the request exceeds the max-post-size limit maxEntitySize, Undertow's AjpServerRequestConduit implementation closes a connection without sending any response to the client/proxy. This behavior results in that a front-end proxy marking the backend worker...
CVE-2022-2053
When a POST request comes through AJP and the request exceeds the max-post-size limit maxEntitySize, Undertow's AjpServerRequestConduit implementation closes a connection without sending any response to the client/proxy. This behavior results in that a front-end proxy marking the backend worker...
UBUNTU-CVE-2022-2053
When a POST request comes through AJP and the request exceeds the max-post-size limit maxEntitySize, Undertow's AjpServerRequestConduit implementation closes a connection without sending any response to the client/proxy. This behavior results in that a front-end proxy marking the backend worker...
CVE-2022-2053
When a POST request comes through AJP and the request exceeds the max-post-size limit maxEntitySize, Undertow's AjpServerRequestConduit implementation closes a connection without sending any response to the client/proxy. This behavior results in that a front-end proxy marking the backend worker...
Exploit for Improper Initialization in Linux Linux_Kernel
!Dirty Pipehttps://forum.hackersploit.org/uploads/default/ori...
PT-2022-32778
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.134 Description The issue concerns a data-race around the sysctl tcp max reordering in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-32365
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue concerns a data-race around sysctl tcp max reordering in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
PT-2022-32591
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue concerns a data-race around sysctl tcp max reordering in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
PT-2022-33031
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.254 Description The issue concerns a data-race around sysctl tcp max reordering in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...
PT-2022-32924
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.208 Description The issue concerns a data-race condition around the sysctl tcp max reordering in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
max-klinger.com Cross Site Scripting vulnerability OBB-2820149
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Denial of service
An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service via the switchNextDisplayInterface service...
CVE-2020-21406
The CVE-2020-21406 vulnerability affects RK Smart TV Box MAX and V88 SmartTV box. It allows a denial-of-service via the switchNextDisplayInterface service. According to the initial records, the issue has a CVSS v3.1 base score of 7.5 (Network, no authentication, low complexity, high impact on ava...
PT-2022-8640
Name of the Vulnerable Software and Affected Versions RK Smart TV Box MAX affected versions not specified V88 SmartTV box affected versions not specified Description An issue was discovered that allows attackers to cause a denial of service via the switchNextDisplayInterface service...