107 matches found
Design/Logic Flaw
cPanel before 78.0.18 allows local users to escalate to root access because of userdata cache misparsing SEC-479...
CVE-2019-14400
CVE-2019-14400 affects cPanel prior to 78.0.18. The vulnerability arises from userdata cache misparsing (SEC-479) and allows a local attacker to escalate privileges to root. The impact is described as complete confidentiality, integrity, and availability compromise for the affected host. Remediat...
CVE-2019-14400
cPanel before 78.0.18 allows local users to escalate to root access because of userdata cache misparsing SEC-479...
PT-2019-13669
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 78.0.18 Description The issue allows local users to escalate to root access due to userdata cache misparsing. Recommendations For versions prior to 78.0.18, update to version 78.0.18 or later to resolve the issue...
CVE-2017-7189
CVE-2017-7189 affects PHP 7.x prior to 2017-03-07: main/streams/xp_socket.c misparses fsockopen calls (e.g., fsockopen('127.0.0.1:80', 443) can be treated as 127.0.0.1:80:443 then truncated to 127.0.0.1:80). The hostname input from untrusted sources may enable a security policy bypass when a hard...
CVE-2017-7189
main/streams/xpsocket.c in PHP 7.x before 2017-03-07 misparses fsockopen calls, such as by interpreting fsockopen'127.0.0.1:80', 443 as if the address/port were 127.0.0.1:80:443, which is later truncated to 127.0.0.1:80. This behavior has a security risk if the explicitly provided port number i.e...
CVE-2017-7189
Removed by vendor...
CVE-2017-7189: Improper Input Validation
main/streams/xpsocket.c in PHP 7.x before 2017-03-07 misparses fsockopen calls, such as by interpreting fsockopen'127.0.0.1:80', 443 as if the address/port were 127.0.0.1:80:443, which is later truncated to 127.0.0.1:80. This behavior has a security risk if the explicitly provided port number i.e...
Intelbras IWR 3000N - Denial of Service (Remote Reboot) Vulnerability
Exploit for hardware platform in category web applications /bin/bash PoC based on CVE-2019-11415 created by Social Engineering Neo. Credit: https://1.337.zone/2019/04/08/intelbras-iwr-3000n-any-version-dos-on-malformed-login-request/ A malformed login request allows remote attackers to cause a...
Intelbras IWR 3000N - Denial of Service (Remote Reboot)
/bin/bash PoC based on CVE-2019-11415 created by Social Engineering Neo. Credit: https://1.337.zone/2019/04/08/intelbras-iwr-3000n-any-version-dos-on-malformed-login-request/ A malformed login request allows remote attackers to cause a denial of service reboot, as demonstrated by JSON misparsing ...
CVE-2019-11415
An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to cause a denial of service reboot, as demonstrated by JSON misparsing of the "" string to v1/system/login...
Code injection
An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to cause a denial of service reboot, as demonstrated by JSON misparsing of the "" string to v1/system/login...
CVE-2019-11415
An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to cause a denial of service reboot, as demonstrated by JSON misparsing of the "" string to v1/system/login...
CVE-2019-11415: Undefined Security Weakness
An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to cause a denial of service reboot, as demonstrated by JSON misparsing of the "" string to v1/system/login...
CVE-2009-5155
In the GNU C Library aka glibc or libc6 before 2.28, parseregexp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service assertion failure and application exit or trigger an incorrect result by attempting a regular-expression match...
AZL-44787 CVE-2009-5155 affecting package metis 5.1.0.3-7
In the GNU C Library aka glibc or libc6 before 2.28, parseregexp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service assertion failure and application exit or trigger an incorrect result by attempting a regular-expression match...
Design/Logic Flaw
An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dnsgetrecord misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects phpparser...
CVE-2019-9022
An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dnsgetrecord misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects phpparser...
UBUNTU-CVE-2019-9022
An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dnsgetrecord misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects phpparser...